From Dev.to
Who Governs the Governor? — Stored Prompt Injection Through the API Gateway
When AI agents write to and read from your database through legitimate API calls, the attack lives in the gap between two correct authorization decisions. Thirteen years of API gateway scars, applied...