A signed-in Duo user could break out of a prompt template sandbox and run commands on self-hosted AI Gateway hosts,…