Partially Verified65% confidenceFactExact time
Prompt injection is a class of attack faced by LLM applications in which attackers disguise malicious instructions as normal content to induce the model to execute them.
3
Sources
65%
Confidence
Long-term
Relevance
10/17/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedPrompt injection attacks can use carefully crafted user inputs to induce the model to ignore the constraints of the system prompt.78% similarUnverifiedA prompt injection attack refers to a situation where maliciously crafted web pages in an agent's environment inject new instructions, causing the agent's behavior to deviate from the designer's intentions.76% similarVerifiedIndirect prompt injection refers to attackers pre-embedding malicious instructions into third-party content (such as web pages, PDF documents, or API responses), which the model then executes after RAG systems retrieve or tool calls pull this content into the context.74% similarUnverifiedAttackers tamper with a model's chat template by calling the create API, permanently injecting malicious instructions into the System prompt; this change is stored in the model's Modelfile and is invisible to the client and undetectable by standard tools.74% similarUnverified在多人协作线程中，提示注入（Prompt Injection）的攻击面扩大，任何有访问权限的用户都可能成为注入向量，恶意指令可能被伪装成背景补充或方向修正71% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1052921API
curl https://kongchang.com/api/v1/knowledge/claims/1052921MCP
get_claim(id=1052921)