AI & LLMs
Hidden Database Access in Your AI Stack
An AI chatbot's input validation rejected every injection attempt, until an SRT researcher realized it was filtering by intent, not syntax. Wrapping the real payload inside a benign, expected-looking request slipped past the filter and returned database schema details in markdown. A reminder that guardrails built to catch intent are exploitable once you find their blind spot.
