Description
OpsTree REMS through 1.0.0 contains a prompt injection vulnerability that allows authenticated users to disclose the hidden system prompt by submitting crafted chat input to POST /api/v1/rca/chat. Attackers can instruct the assistant to ignore its rules and reveal internal orchestration instructions, aiding the crafting of further prompt injection attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpsTree Solutions | REMS | ≤ 1.0.0 | — |
References
- https://gist.github.com/neelkotnis/548bfde3e45bc3793f3f26e1f9a43efe technical-description exploit
- REMS by OpsTree Product Page product
- VulnCheck Advisory: OpsTree REMS through 1.0.0 Prompt Injection via RCA Chat Assistant third-party-advisory