Model routers are a supply-chain attack waiting to happen, security researcher warns

dyn___ · x · 2026-10-30

In a discussion with @joshuasaxe, @dyn argues that model routers and the hundreds of discount model-hosting "neocloud" providers serving models through them form an underappreciated attack surface: an intermediary could impersonate a model—returning outputs from a different model entirely—and users would have no way to tell. He calls it "a big attack waiting to happen."

Related event: Researchers Warn LLM Routers Could Enable Mass RCE Attacks(3 posts)→

Original post →

More from Safety

Safety channel →