# Red Hat and Nvidia's OpenShell puts AI agents on a deny-by-default leash

DevFeed: [Red Hat and Nvidia's OpenShell puts AI agents on a deny-by-default leash](<https://devfeed.tech/articles/red-hat-and-nvidia-s-openshell-puts-ai-agents-on-a-deny-by-default-leash-129342.md>)

Original publisher: [Read original article](<https://siliconangle.com/2026/11/11/prompt-injection-attacks-drive-red-hat-nvidia-s-openshell-kubeconna/>)

Author: Ryan Stevens

Published: 2026-11-11T18:55:13Z

Content type: news

Language: en

Sources: [SiliconANGLE](<https://devfeed.tech/sources/siliconangle.md>)

Topics: [OpenShell](<https://devfeed.tech/topics/openshell.md>), [ai security](<https://devfeed.tech/topics/ai-security.md>), [redhat](<https://devfeed.tech/topics/redhat.md>), [Nvidia](<https://devfeed.tech/topics/nvidia.md>)

Tags: [agent-security](<https://devfeed.tech/tags/agent-security.md>), [agentic-ai](<https://devfeed.tech/tags/agentic-ai.md>), [agents](<https://devfeed.tech/tags/agents.md>), [agents-in-production](<https://devfeed.tech/tags/agents-in-production.md>), [ai](<https://devfeed.tech/tags/ai.md>), [ai-agent](<https://devfeed.tech/tags/ai-agent.md>), [ai-agent-security](<https://devfeed.tech/tags/ai-agent-security.md>), [ai-agents](<https://devfeed.tech/tags/ai-agents.md>), [ai-inference](<https://devfeed.tech/tags/ai-inference.md>), [ai-infrastructure](<https://devfeed.tech/tags/ai-infrastructure.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [cloud-native](<https://devfeed.tech/tags/cloud-native.md>), [cloud-native-computing-foundation](<https://devfeed.tech/tags/cloud-native-computing-foundation.md>), [cloud-security](<https://devfeed.tech/tags/cloud-security.md>), [cloudnativecon](<https://devfeed.tech/tags/cloudnativecon.md>), [cncf](<https://devfeed.tech/tags/cncf.md>), [credentials](<https://devfeed.tech/tags/credentials.md>), [cube-event-coverage](<https://devfeed.tech/tags/cube-event-coverage.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [data-exfiltration](<https://devfeed.tech/tags/data-exfiltration.md>), [derek-carr](<https://devfeed.tech/tags/derek-carr.md>), [developer-platforms](<https://devfeed.tech/tags/developer-platforms.md>), [enterprise](<https://devfeed.tech/tags/enterprise.md>), [enterprise-ai](<https://devfeed.tech/tags/enterprise-ai.md>), [gpu-infrastructure](<https://devfeed.tech/tags/gpu-infrastructure.md>), [guardrails](<https://devfeed.tech/tags/guardrails.md>), [john-furrier](<https://devfeed.tech/tags/john-furrier.md>), [kubecon](<https://devfeed.tech/tags/kubecon.md>), [kubecon-plus-cloudnativecon-na-2026](<https://devfeed.tech/tags/kubecon-plus-cloudnativecon-na-2026.md>), [kubeconna](<https://devfeed.tech/tags/kubeconna.md>), [kubeconna26eventpage](<https://devfeed.tech/tags/kubeconna26eventpage.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [mrunal-patel](<https://devfeed.tech/tags/mrunal-patel.md>), [news](<https://devfeed.tech/tags/news.md>), [nvidia](<https://devfeed.tech/tags/nvidia.md>), [nyse-ibm](<https://devfeed.tech/tags/nyse-ibm.md>), [observability](<https://devfeed.tech/tags/observability.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [openshell](<https://devfeed.tech/tags/openshell.md>), [platform-engineering](<https://devfeed.tech/tags/platform-engineering.md>), [prompt-injection](<https://devfeed.tech/tags/prompt-injection.md>), [rebecca-knight](<https://devfeed.tech/tags/rebecca-knight.md>), [red-hat](<https://devfeed.tech/tags/red-hat.md>), [security](<https://devfeed.tech/tags/security.md>), [thecube](<https://devfeed.tech/tags/thecube.md>)

## AI overview

OpenShell is an open-source project from Red Hat and Nvidia intended to help enterprises run AI agents with safeguards against prompt injection and data exfiltration. Operators can permit access to specific endpoints while keeping credentials hidden from agents and scoped to those endpoints; networking is deny-by-default. A policy advisor asks agents to explain blocked actions in plain language, and operators can update policies as workloads change. The project is under Cloud Native Computing Foundation governance following Nvidia's contribution. Red Hat aims to make deploying agents on OpenShift routine, but the excerpt offers no implementation details or comparative evaluation of the safeguards.

## Source excerpt

Prompt injection attacks and silent data exfiltration have turned AI agent security from a theoretical worry into an urgent enterprise concern. As agents move from developer laptops into data centers, companies need guardrails that don't strip away what makes agents useful. Red Hat Inc. and Nvidia Corp. have expanded their partnership to tackle that problem [...] The post Red Hat and Nvidia's OpenShell puts AI agents on a deny-by-default leash appeared first on SiliconANGLE.