I recently started doing experiments with local models with traces into MLFlow detailed tool calls. Last month I had a local Qwen Model on a coding task to just randomly decide to read a transcript of a youtube video. Today I realized there is a lesser known fetch pattern where the HTTP standard actually allows for body payloads like a POST request on GET requests. I recently saw a video on poisoned models and now realize there is a potentially huge exploit waiting to happen with GET and body payloads   submitted by   /u/bigorangemachine [link]   [comments]