Demonstrates that instructions planted in retrieved content can hijack real LLM-integrated applications for data theft and manipulation.

Capability: Following instructions hidden in data

Sources

supportsNot what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection
Demonstrates that instructions planted in retrieved content can hijack real LLM-integrated applications for data theft and manipulation.

Reviewed by AI and Russ MillerLast checked: 2026-09-03Evidence activity

Either way, bring evidence: a link, or what you saw.

Disagreeing is the most useful thing you can do here. Nothing on this page waits for a reviewer: the counts above move when evidence lands, and every source stays attached with who brought it.