Your AI Agent's Chat History Is User Input

A critical vulnerability allows jailbreaking production chat assistants by manipulating the conversation transcript via devtools, bypassing content filters without complex prompt engineering. Separately, suddo addresses a limitation in MCP clients that lack PTY support for sudo password prompts. By using the execute_command tool, suddo enables AI agents to run privileged commands safely. It manages password requests and rule-based permissions, eliminating the need for users to open separate terminals when executing sudo tasks.