Destructive System Command Execution via LLM Prompt Injection

Georgios Maragos@Gmarak

•updated May 5, 2026•0•280

Detects destructive Linux commands such as recursive root directory deletion (rm -rf /*) and random data disk wiping (dd if=/dev/urandom of=/dev/sdX). This behavior has been observed as payloads in indirect prompt injections targeting LLM agents to destroy host filesystems.