#tool-calling

When Prompts Become Shells: How Prompt Injection Turned AI Agents Into Remote Code Execution

Jul 21, 2026

Prompt injection is not a content-safety nuisance. In tool-using AI agents it is a remote-code-execution class -- traced through four disclosed 2025-2026 CVEs.