CVE-2022-30190 Remote Code Execution Vulnerability affecting AI systems

Prompt injection attacks manipulate AI systems, particularly Large Language Models (LLMs), by overriding their intended instructions through malicious input, leading to sensitive data leakage, unauthorized actions, or corrupted outputs. A real-world example involved a phishing campaign leveraging hidden text-based prompt injection to bypass AI defenses, coupled with the exploitation of CVE-2022-30190 (Follina) for remote code execution.

What Happened

Prompt injection attacks manipulate AI systems, particularly Large Language Models (LLMs), by overriding their intended instructions through malicious input, leading to sensitive data leakage, unauthorized actions, or corrupted outputs. A real-world example involved a phishing campaign leveraging hidden text-based prompt injection to bypass AI defenses, coupled with the exploitation of CVE-2022-30190 (Follina) for remote code execution.

Why This Matters

The evidence matters to defenders using AI systems because it could let an attacker run code in affected environments.

Recommended Action

Confirm whether llm is present in your environment, compare your versions against the report, and apply available vendor patches or mitigations.

Exposure

Exposure reason: This incident does not currently match a technology in My Interests.

Exploitation status: CONFIRMED_IN_THE_WILD

Primary entities:

Authoritative Intelligence

EPSS is a vulnerability exploitation probability signal, not proof that your environment is exposed. CISA KEV means known exploitation of the vulnerability, not that your system was exploited.

Public GitHub References

Search GitHub for public repositories that mention this CVE. BugSkan only lists repository metadata as a defensive awareness signal — it does not fetch or display exploit code.

Timeline

• Incident first seen
  Dec 29, 2025 05:30

  BugSkan first recorded this incident.

• Defending AI Systems Against Prompt Injection Attacks - wiz.io
  Dec 29, 2025 05:30

  wiz.io · Vulnerability

Sources

Related Incidents

Other BugSkan incidents that share identifiers, products, or vendors with this report.

My Interests Match