Prompt Injection Is Now an RCE Primitive

Prompt injection now enables remote code execution when models access tools. Microsoft's research on Semantic Kernel vulnerabilities showed model-controlled input reaching unsafe evaluation and host file writes. Defense requires per-task tool allowlists, default-deny egress, and human approval for high-risk actions.