Name: LGTM: Bypassing an LLM Build Gate When Prompt Injection Fails
Start: 2026-11-06T13:15:00-0800
End: 2026-11-06T14:00:00-0800

LGTM: Bypassing an LLM Build Gate When Prompt Injection Fails

Friday November 6, 2026 1:15pm - 2:00pm PST

Room: Grand Ballroom A (Street Level)

Models are starting to make security decisions that used to be written as rules. Instead of matching an input against a policy, a model reads the request and decides what to do with it. OpenSearch is one of the first to put one in production as the only thing standing between an anonymous pull request and CI pipeline secrets.

When I reported a vulnerability, the team told me their model would catch it. So I tried to get past it the way you'd expect, hiding the attack. The model caught all of it, and going at it head-on wasn't going to work.

So I stopped trying to outsmart it and started thinking like it, reading why each attempt got caught until I understood what it could actually verify and what it only assumed. What got through in the end hid no attack, because the only dangerous part lived somewhere the model had no way to check.

This talk walks the whole path, from first failed attempt to the bypass that worked. Along the way I mapped the model's decision boundary - what it catches, what slips past, and how far an input bends before its judgment flips. The deeper gap is what it never sees at all, the blind spots built into how it reads a change. You'll see where a model can be trusted to make this call and where it can't, and what that means before you put one in front of something that matters.

Speakers

Aviv Donenfeld

Security Researcher, Check Point Software Technologies

Aviv Donenfeld is a Security Researcher at Check Point Software Technologies. Before security research, he built distributed networking systems as a software engineer. His recent research centers on the attack surfaces of AI coding assistants, including critical vulnerabilities in... Read More →

Friday November 6, 2026 1:15pm - 2:00pm PST
Room: Grand Ballroom A (Street Level)

Deployment and Maintenance

Audience Intermediate

OWASP Global AppSec USA 2026

Aviv Donenfeld

Get help with the event

OWASP Global AppSec USA 2026

Aviv Donenfeld

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Get help with the event