Inference-Time Backdoors via Chat Templates: From LLM Supply Chains to Agentic System Compromise

Ariel Fogel, Omer Hofman, Eilon Cohen +1

Open-weight language models are increasingly used in production settings, raising new security challenges. One prominent threat is backdoor attacks, in which adversaries embed hidd…