AI Agents Installing Unowned Code via Malicious llms.txt Files
lilyraynyc · x · 2026-08-28
Ars Technica reports a new security vulnerability where AI Agents automatically execute potentially dangerous content found in llms.txt files.
- Research Scope: Researchers scanned 6,214 domains belonging to defense contractors, Fortune 500 companies, and Big Tech, finding 8,265 llms.txt files, with 120 containing malicious references.
- Core Risk: 227 install commands pointed to unowned code, with some sites directing traffic to live malware.
- Impact: Dozens of companies, including Fortune 500s, executed proof-of-concept code. The exploit targets the emerging llms.txt convention, designed to help AI understand site structure.
Related event: llms.txt files emerge as new attack vector tricking AI agents(2 posts)→
More from Safety
- Senate set to give staffers access to Anthropic's Claude, Bloomberg reports — ShakeelHashim · 2026-10-16
- FDA pays small company to build a grading system for AI-written radiology reports — YvesMulkers · 2026-10-16
- OpenAI tells US judiciary there may be no reliable way to detect AI-generated images and videos — Polymarket · 2026-10-16
- Gartner: 75% of organizations have seen unauthorized use of AI coding assistants — moniquejmorrow · 2026-10-16
- [un]prompted conference to stage three AI security debates on vulns, defenses, jailbreaks — WeldPond · 2026-10-16
- User Questions AI Chat Logs Being Instantly Copied to Governments and Firms — Turn_Trout · 2026-10-16