The Window Is in the Reasoning: When LLM Agents Decide to Follow Prompt Injections

Haoxuan Jia, Yang Liu, Bin Chong +13

LLM agents that read untrusted content can be hijacked by prompt injections. Runtime monitors that try to catch a hijack before the agent acts, and benchmarks that score each task…