Monday, October 26, 2026 · Edition updated 6:00 AM ETMON, OCT 26 editionNext edition in Next in --:--:--
Intelligence Verdict
Testing and safety

Prompt injection

An attack in which hidden or malicious instructions, typed in or planted in a web page, email or file the AI reads, make it do something its user did not intend.

The wording it rests on

In their own words.

Our plain version above is ours. This is the official or expert wording we based it on.

“A Prompt Injection Vulnerability occurs when user prompts alter the LLM's behavior or output in unintended ways.”

“Indirect prompt injections occur when an LLM accepts input from external sources, such as websites or files.”

OWASP Top 10 for LLM Applications 2025, LLM01: Prompt Injection, Apr 17, 2025