Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

Auditing the Ask Astro LLM Q&A app

Summary

Trail of Bits audited Ask Astro, an open-source RAG chatbot, finding four issues: data poisoning via source deletion, split-view poisoning through GitHub Issues, GraphQL injection, and prompt injection.
Published
Collected

original ↗

Related coverage

back