Chat-only attack poisons reused reasoning KV caches in LLMs
R2ECAP reached up to 79% success on three open-weight models and beat HijackKV in eight of nine constrained settings.
2 stories, newest first · one card per story
R2ECAP reached up to 79% success on three open-weight models and beat HijackKV in eight of nine constrained settings.

A networking flaw in Nvidia tooling lets attackers reach OpenClaw's local model server unauthenticated via the Ollama API, enabling persistent LLM poisoning.
Today 1.6K readers · 2.5K views · 778 reads · all time 189K views