From prompt to pwned: chaining LLM and web bugs to Admin
A red team exercise chained LLM prompt injection and web vulnerabilities to achieve admin account takeover from a low-privileged account. The attack exploited insecure output handling in an AI medical assistant, demonstr…