IBM's AI 'Bob' could be manipulated to download and execute malware

A hand reaching out to touch a futuristic rendering of an AI processor.

• IBM’s GenAI tool “Bob” is vulnerable to indirect prompt injection attacks in beta testing
• CLI faces prompt injection risks; IDE exposed to AI-specific data exfiltration vectors
• Exploitation requires “always allow” permissions, enabling arbitrary shell scripts and malware deployment

IBM’s Generative Artificial Intelligence (GenAI) tool, Bob, is susceptible to the same dangerous attack vector as most other similar tools - indirect prompt injection.