CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs

Pukaphol Thienpreecha, Karthik Subramanian

Document-based LLM systems often flatten a PDF before guardrails inspect it. That step can discard evidence that an instruction was never visible to the user. We introduce CrackedP…