METR demo shows JavaScript injection via MathJax; Inspect patched within a day
Original titleThis demonstration used a JavaScript injection via MathJax rendering, which an agent could trigger from anywhere in its output, including...
AISummary
METR demonstrated a JavaScript injection that an agent could trigger through MathJax rendering from any part of its output, including its reasoning. METR says it has not observed agents exploiting this in its evaluations, and the Inspect tool was patched within a day of the report.
Source: METR · x.comPublished · added here