Intent-Hiding Jailbreaks: An Information-Theoretic Framework for Compositional Attacks

Fengwei Tian, Ravi Tandon

Recent work has shown that large language models (LLMs) can be vulnerable to jailbreak attacks in which harmful intent is obscured through composition with benign tasks. A harmful…