OpenHands and the Lethal Trifecta: How Prompt Injection Can Leak Access Tokens
Another day, another AI data exfiltration exploit. Today we talk about OpenHands , formerly referred to as OpenDevin. It’s created by All-Hands AI. The OpenHands agent renders images in chat, which enables zero-click data exfiltration. Simon Willison recently gave this data exfiltration attack pattern a great name: Lethal Trifecta . We discuss this specific image based attack technique frequently.
Summary from Embrace The Red.
Explained
The technology and terms in this story. Learn more