Auditing the Ask Astro LLM Q&A app
blog.trailofbits.com | blog | #ai-security | #prompt-injection | #llm | #audit | #rag | #data-poisoning | #trail-of-bits | #graphql-injection
Summary
Trail of Bits audited Ask Astro, an open-source RAG chatbot, finding four issues: data poisoning via source deletion, split-view poisoning through GitHub Issues, GraphQL injection, and prompt injection.
- Published
- Collected
Skip to content