metaend.eth's cast | Paragraph
metaend.eth](https://paragraph.com/0xccc242144041042c3709cdd18d60ecc16669460a)
Jun 23
PixelRAG renders documents — web pages, PDFs, images — as screenshots and retrieves over the images directly
Used pixelshot to extract data from PDF and successfully prompt injected Qwen3.6 with it - this could potentially poison your whole RAG index. Would work with any other "normal" image, but I wanted to make it obvious how dangerous this RAG method is.
#ai #secops #aisec #promptinjection