Divide and Inject: Can Agents Reconstruct an Indirect Prompt Injection from Fragments?
Agentic systems are now being widely used to orchestrate tools and reason over long contexts. However, the improving capabilities of the large language models powering these agents also create new attack surfaces for indirect prompt injection. In particular, an attacker may not need to place a complete malicious instru...
Michael E. M. Lee, Zhi-Peng Wei, Yue Dong et al.
· 0 citations