Your AI Agent Has Been Under My Control! Chaofan Exposes a Critical Vulnerability in the Relay Station

Recently, Chaofan jointly published a paper titled "Your Agent Is Mine," revealing for the first time that third-party LLM routers (relay stations) have become the most critical points of man-in-the-middle attacks in the AI Agent field. The core principle lies in the fact that routers act as application-layer MITM, and modern AI Agents almost entirely rely on third-party services, leading to developers being completely controlled without even realizing it. This discovery has instantly alarmed developers who depend on low-cost relay services like OpenRouter and LiteLLM.