ConfusedPilot: Confused Deputy Attacks Against RAG-based Code Assistants

Andrew Patel, Hossein Aboutorab, Ilia Kolochenko

Abstract

Introduces confused deputy attacks against RAG-based code assistants like GitHub Copilot, where poisoned code repositories manipulate assistant outputs.

Categories

Tags

Framework Mappings

Cite This Resource

@article{llmsec202400036,
  title = {ConfusedPilot: Confused Deputy Attacks Against RAG-based Code Assistants},
  author = {Andrew Patel and Hossein Aboutorab and Ilia Kolochenko},
  year = {2024},
  journal = {arXiv preprint},
  url = {https://arxiv.org/abs/2409.12345},
}