The Innocent Courier: Covert Exfiltration Through Legitimate LLM Web Fetching

Excerpt

arXiv:2610.01768v1 Announce Type: cross Abstract: With the increasing capabilities of Large-Language-Models (LLMs) and LLM-based agents, users are increasingly using them to solve everyday problems, such as answering e-mails or providing programming support. Existing work has extensively investigated security and privacy risks, such as prompt injections and the disclosure of sensitive data to chatbot providers. While various solutions were developed to address these risks, including input struct