Unverified60% confidenceFactExact time
Large language models cannot reliably distinguish the boundary between system instructions and user/external content during inference—this is a fundamental limitation of prompt injection, similar in principle to SQL injection.
2
Sources
60%
Confidence
Long-term
Relevance
7/16/2026
First Seen
Sources
Related Claims
UnverifiedUnlike SQL injection, prompt injection has no simple escaping or parameterization scheme, because there is no formal boundary between natural language instructions and data.80% similarVerified提示注入的根本原因在于大语言模型缺乏区分指令层与数据层的原生机制79% similarVerifiedLarge language models are architecturally incapable of strictly distinguishing between system instructions and user data, which is a fundamental flaw at the architectural level.79% similarUnverifiedUnlike traditional SQL injection or XSS attacks, prompt injection exploits the language model's own understanding of natural language and is difficult to defend against through simple input filtering.79% similarVerified大语言模型推理的瓶颈往往不在计算能力，而在于内存带宽78% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/533469API
curl https://kongchang.com/api/v1/knowledge/claims/533469MCP
get_claim(id=533469)