Affected Vendor(s)
Affected Product(s)
Summary
The web_fetch tool is intended to accept a public URL and retrieve the contents. When asked to retrieve the contents from a private destination (such as http://localhost), the AI rightly refuses. Unfortunately, it can be easily tricked and subverted.
By providing encoded or non-obvious variations, the AI does not validate the input and proceeds to point its fetching client inward, thereby exposing internal information.
Timeline
Credit
Blog Post
References
Take the first step towards securing your AI. Book a demo now and we'll reach out to you.
