Piotr discovered something worrying: if you give an LLM a list of tools it's allowed to call, it might decide to also call a tool you didn't provide! Impacts all major US providers except @OpenAI
. Be sure to check LLM tool call requests! (Lisette/Claudette check automatically)
LLM Tool Call Vulnerability Discovered Across Major Providers
By
–