Yacine Souam

Yacine Souam

Yacine Souam — Last Publications

AI vs AI: How Cascade exploited an AI agent in production
Research

AI vs AI: How Cascade exploited an AI agent in production

We pointed Cascade, Escape's AI pentesting engine, at a production AI agent. The agent had a guardrail built to catch prompt injection. Cascade got past it on the second try. The trick wasn't a smarter payload, just a different pretext, and the agent handed over its
Yacine Souam
Yacine Souam
4 min read
How Escape AI Pentesting Exploited SSRF in LiteLLM
Agentic Pentesting

How Escape AI Pentesting Exploited SSRF in LiteLLM

At Escape, we routinely test the AI infrastructure that teams deploy inside their cloud environments. LLM gateways, RAG pipelines, model proxies: these are services that make outbound HTTP requests by design, which makes them natural targets for SSRF. When we looked at LiteLLM, we found three confirmed SSRF sinks, a
Yacine Souam
Yacine Souam
9 min read

Escape Blog Squad