LLM plugins processing untrusted inputs and having inadequate accessibility Command chance serious exploits like distant code execution.