Prefilling the Reasoning Channel: Output-Prefix Attacks on Reasoning LLMs

Lukáš Brůna, Robert Bridges, Adam Ek

Large Language Models (LLMs) consume and produce a single sequence of text; hence, if text can be added to the beginning of the LLM's response, i.e., an output prefix, then all sub…