Indirect Prompt Injection

Ask about this topic

Recent momentum

+8%

13 papers in the last 28 days · 0.2% of indexed attention

Twelve weeks of publication activity for this topic as it is defined today.

Weekly history

Recent digests

What was published in this topic, kept on the site without email delivery.

Period ending 2026-09-21

4 new papers

A weekly snapshot of new work published in Indirect Prompt Injection.

Period ending 2026-09-14

3 new papers

A weekly snapshot of new work published in Indirect Prompt Injection.

Period ending 2026-09-07

2 new papers

A weekly snapshot of new work published in Indirect Prompt Injection.

91 papers

Latest in Indirect Prompt Injection

Browse all topics →
CardsList

  1. CacheProbe: Auditing Prompt Cache Isolation in Gateway APIs

    May 28, 2026Ryan FaheyIndirect Prompt InjectionCache

  2. The Surface You Test Is Not the Surface That Breaks

    May 28, 2026Shifat E Arman, Syed Nazmus Sakib, Nafiul Haque +1Indirect Prompt InjectionMultiple Attack Surfaces

  3. Harmless Yet Harmful: Neutral Prompting Attacks for Stealthy Hallucination Steering in Agent Skills

    May 28, 2026Chia-Yi Hsu, Chia-Mu Yu, Chun-Ying Huang +1Indirect Prompt InjectionLarge Language Model Hallucination

  4. Measuring Real-World Prompt Injection Attacks in LLM-based Resume Screening

    May 27, 2026Mohan Zhang, Yuqi Jia, Zhen Tan +4Indirect Prompt InjectionLanguage Model Evasion Attacks

  5. Mitigating Adaptive Attacks against Reasoning Models with Activation Consistency Training

    May 27, 2026Avidan Shah, Jannik Brinkmann, Rico AngellLarge Reasoning ModelsAdversarial Jailbreaks

  6. Prompt Injection Detection is Regime-Dependent: A Deployment-Aware Evaluation with Interpretable Structural Signals

    May 26, 2026Akindoyin Akinrele, Shreyank N GowdaIndirect Prompt InjectionLarge Language Model Safety

  7. Cordyceps: Covert Control Attacks on LLMs via Data Poisoning

    May 26, 2026Zedian Shao, Charles Fleming, Teodora BalutaLanguage Model Evasion AttacksData Poisoning

  8. IterInject: Indirect Prompt Injection Against LLM Agents via Feedback-Guided Iterative Optimization

    May 23, 2026Zixuan Chen, Jiaxiang Chen, Li Luo +4Indirect Prompt InjectionLlm-Based Agent

  9. MixFake: Benchmarking and Enhancing Audio Deepfake Detection in Diverse Real-world Mixed Audio

    May 22, 2026Qingcao Li, Yipeng Lin, Weichen Lian +3Audio Deepfake DetectionAudio Flow

  10. Blind Spots in the Guard: How Domain-Camouflaged Injection Attacks Evade Detection in Multi-Agent LLM Systems

    May 21, 2026Aaditya PaiNovel Dual-Branch Identity Injection MechanismIndirect Prompt Injection

  11. An Empirical Study of Privacy Leakage Chains via Prompt Injection in Black-Box Chatbot Environments

    May 18, 2026Hongjang Yang, Hyunsik Na, Daeseon ChoiIndirect Prompt InjectionLanguage Model Evasion Attacks

  12. LivePI: More Realistic Benchmarking of Agents Against Indirect Prompt Injection

    May 18, 2026Lei Zhao, Abhay Bhaskar, Edgar DobribanIndirect Prompt InjectionInjection

  13. ESLD (External Surrogate Latent Defense): A Latent-Space Architecture for Faster, Stronger Prompt-Injection Defense

    May 18, 2026Yash NarendraIndirect Prompt InjectionGuard

  14. AI Agents May Always Fall for Prompt Injections

    May 17, 2026Sahar Abdelnabi, Eugene BagdasarianIndirect Prompt InjectionArtificial Intelligence Agents

  15. ASPI: Seeking Ambiguity Clarification Amplifies Prompt Injection Vulnerability in LLM Agents

    May 17, 2026Udari Madhushani Sehwag, Zhengyang Shan, Heming Liu +3Indirect Prompt InjectionLarge Language Model Agents

  16. WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections

    May 14, 2026Tri Cao, Yulin Chen, Hieu Cao +8Indirect Prompt InjectionWeb Agents

  17. No More, No Less: Task Alignment in Terminal Agents

    May 12, 2026Sina Mavali, David Pape, Jonathan Evertz +5Agentic BenchmarksComputer-Use Agents

  18. IPI-proxy: An Intercepting Proxy for Red-Teaming Web-Browsing AI Agents Against Indirect Prompt Injection

    May 12, 2026Chia-Pei, Chen, Kentaroh Toyoda +2Indirect Prompt InjectionWeb Agents

  19. MIPIAD: Multilingual Indirect Prompt Injection Attack Defense with Qwen -- TF-IDF Hybrid and Meta-Ensemble Learning

    May 8, 2026Al Muhit Muhtadi, Mostafa Rifat TazwarIndirect Prompt InjectionLanguage Model Evasion Attacks

  20. VisInject: Disruption != Injection -- A Dual-Dimension Evaluation of Universal Adversarial Attacks on Vision-Language Models

    May 2, 2026Pang Liu, Yingjie LaoAdversarial ExamplesIndirect Prompt Injection

  21. Latent Adversarial Detection: Adaptive Probing of LLM Activations for Multi-Turn Attack Detection

    Apr 30, 2026Prashant KulkarniAdversarial ExamplesIndirect Prompt Injection

  22. SnapGuard: Lightweight Prompt Injection Detection for Screenshot-Based Web Agents

    Apr 28, 2026Mengyao Du, Han Fang, Haokai Ma +4Indirect Prompt InjectionWeb Agents

  23. Evaluation of Prompt Injection Defenses in Large Language Models

    Apr 26, 2026Priyal Deep, Shane Emmons, Amy Fox +4Language Model Evasion AttacksIndirect Prompt Injection

  24. Beyond Pattern Matching: Seven Cross-Domain Techniques for Prompt Injection Detection

    Apr 20, 2026Thamilvendhan MunirathinamIndirect Prompt Injection

  25. CASCADE: A Component Ablation and Corpus Audit of a Layered Local Defense for MCP-Based Systems

    Apr 18, 2026İpek Abasıkeleş Turgut, Edip GümüşIndirect Prompt InjectionModel Context Protocol

  26. Prompt Injection as Role Confusion

    Feb 22, 2026Charles Ye, Jasmine Cui, Dylan Hadfield-MenellIndirect Prompt InjectionLanguage Model Evasion Attacks

  27. From One-to-One to Many-to-Many: Dynamic Cross-Layer Injection for Deep Vision-Language Fusion

    Jan 15, 2026Cheng Chen, Yuyu Guo, Pengpeng Zeng +4Large Vision Language ModelsVision Encoders

  28. It's a TRAP! Task-Redirecting Agent Persuasion Benchmark for Web Agents

    Dec 29, 2025Karolina Korgul, Yushi Yang, Arkadiusz Drohomirecki +7Web AgentsIndirect Prompt Injection

  29. "Give a Positive Review Only": An Early Investigation Into In-Paper Prompt Injection Attacks and Defenses for AI Reviewers

    Nov 3, 2025Qin Zhou, Zhexin Zhang, Zhi Li +1Artificial Intelligence ReviewersIndirect Prompt Injection

  30. WAInjectBench: Benchmarking Prompt Injection Detections for Web Agents

    Oct 1, 2025Yinuo Liu, Xilong Wang, Ruohan Xu +2Indirect Prompt Injection

  31. Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment

    Sep 6, 2025Yuchong Xie, Mingyu Luo, Zesen Liu +7Red-TeamingCoding Agents