))
Prompt Injection to RCE: When AI Gets Compromised | The AppSec Insiders Ep.16
Manage episode 496485038 series 3482903
Content provided by Farshad Abasi. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Farshad Abasi or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.
In this episode, we unpack CVE-2025-49596, where prompt injection, CSRF, and localhost access were chained to achieve RCE in the MCP Inspector AI tool. Learn how the exploit worked, what it reveals about LLM security risks, and how to defend against similar threats with sandboxing, access controls, and DevSecOps monitoring.
15 episodes
Share
