Prompt injection

Prompt injection is the LLM-era analogue of SQL injection: once a model processes attacker-controlled text, that text can override the developer's instructions. Indirect injection — payloads hidden in retrieved or browsed content — is especially hard to defend. There is no robust general fix; the linked findings document direct, indirect and exfiltration variants.