BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.romhack.io//romhack-camp-2026//talk//VZ7VY3
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-romhack-camp-2026-VZ7VY3@cfp.romhack.io
DTSTART;TZID=CET:20261003T184000
DTEND;TZID=CET:20261003T192000
DESCRIPTION:Forget prompt injection. While the industry obsesses over manip
 ulating model inputs to bypass guardrails\, it is overlooking a far more d
 angerous threat requiring no user interaction beyond opening the applicati
 on embedded beneath the AI itself: the underlying platform architecture.\n
 \nTo deliver on the promise of full autonomy\, AI-powered coding environme
 nts wire Large Language Models directly into the developer workflow—hand
 ing them local filesystem access\, shell execution\, and cloud credentials
 . Developers accept this tradeoff for the massive productivity gains\, but
  the security cost is severe.\n\nIn these environments\, privileged OS acc
 ess is not a misconfiguration but a product requirement. For a chat interf
 ace to truly become an autonomous "agent\," it must be equipped with tools
 . Equipping the AI with these tools creates a structural conflict with tra
 ditional application isolation\, like Electron's security model. To make t
 he AI function\, developers are forced to break the sandbox and expose hig
 hly permissive IPC (Inter-Process Communication) bridges between the web r
 enderer and the local operating system.\n\nThis presentation provides a te
 chnical deep dive into how chained IDOR vulnerabilities can be escalated i
 nto zero-click RCE via persistent LLM conversation injection and unsafe El
 ectron IPC designs. To prove the real-world impact\, we will debut novel r
 esearch into Orchids\, a leading local\, Electron-based AI coding IDE with
  over a million users\, reported to be used by teams
DTSTAMP:20260921T191336Z
LOCATION:STAGE 2 (Ghost in the Shellcode)
SUMMARY:VibeShell: How Trusting Your AI IDE Costs You Your Machine - Etizaz
  Mohsin
URL:https://cfp.romhack.io/romhack-camp-2026/talk/VZ7VY3/
END:VEVENT
END:VCALENDAR