AI Dynamics

Global AI News Aggregator

About

LLM Security Risk: Shell Command Injection via Tilde Expansion

I almost had this happen yesterday, but my LLM suggested the right thing as `rm -rf '~'`. (with 'quotes'). Still very scary. Example of how this happens, e.g. if something like this sneaks into your .bashrc: export WANDB_DIR="~/.cache/wandb" The ~ isn't expanded inside "quotes"

→ View original post on X — @karpathy