[Tv9m]

I mean that the AI is what's being attacked. It's likely that backend LLM agents will have access to sensitive non-public APIs.

[nradov]

That can happen with any system exposed to untrusted clients. Such vulnerabilities have nothing to do with AI or LLM agents per se, so raising it as a concern with Bing Chat is just a red herring. There are well known best practices for mitigating such risks, including using an API firewall and other techniques.