ZombAI Exploit with OpenHands: Prompt Injection To Remote Code Execution
Brief
Today we have another post about OpenHands from All Hands AI. It is a popular agent, initially named “OpenDevin”, and recently the company also provides a cloud-based service . Which is all pretty cool and exciting.
Prompt Injection to Full System Compromise
However, as you know, LLM powered apps and agents are vulnerable to prompt injection. That also applies to OpenHands and it can be hijacked by untrusted data, e. g. from a website. That impacts Confidentiality , Integrity , and Availability of the system.