Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

All papers

Found 5 papers
Filter5

Attack type

Prompt injection4

Attack technique

Gradient and representation optimization14Automated search51Multi-turn escalation8Encoding and obfuscation16Role-play and persuasion3Reasoning-chain manipulation5Cross-modal payloads11Defense-targeted20Dormant triggers39Selection manipulation11

System type

Models and APIs10AI Agent5coding agent1Browser and computer use0Embodied systems and robotics0

Layer

Application layer4

System component

Reasoning chains5
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 216papers have no tags yet and are not included in filtered results.
Attack technique：Reasoning-chain manipulationSystem type：AI AgentSystem type：coding agentSystem type：Browser and computer useSystem type：Embodied systems and roboticsClear all

Another 216papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2609.27542

    Researchers use control token injection to delete gpt-oss-20b's reasoning chain and bypass chain-of-thought monitoring

    提出控制标记注入，清空工具 Agent 的思维链以绕过推理监控

    arXiv
    2609.27542
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    openai/gpt-oss-20b, google/gemma-4-26B-A4B-it, deepseek-ai/DeepSeek-R1-Distill-Qwen-7B and others4

    Abstract论文阐明控制标记注入可抑制 CoT 使监控失效并促成拒绝绕过，且工具执行受解析器宽容度影响。

    Paper analysisRead analysis
  2. AttacksarXiv 2609.01023

    Akrasia：针对推理型代码 LLM 的隐蔽后门攻击

    提出隐蔽后门攻击 AKRASIA，在推理代码模型提示中植入触发器并伪装思维链

    arXiv
    2609.01023
    Published
    Layer
    Prompt layer
    Setting
    coding agent
    Evaluated models
    Claude-Sonnet-5, GPT-5.5, Gemini-3.5-flash and others7

    Abstract论文针对推理代码大模型提出了隐蔽推断期后门攻击 AKRASIA，揭示了模型思维链可被利用进行欺骗性伪装的安全隐患。

    Paper analysisRead analysis
  4. AttacksarXiv 2604.05549

    Stop obsessing over prompts: reasoning hijacking and constraint tightening for red-teaming LLM agents

    提出 JailAgent，不改用户提示，经推理劫持与记忆投毒操纵 Agent 动作

    arXiv
    2604.05549
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    GPT-3.5-turbo, GPT-4o, GPT-5 and others7
    AbstractJailAgent 不改提示词，用三阶段操纵推理与检索。

    JailAgent 是不修改用户原始提示词的 LLM 智能体红队框架。

    Paper analysisRead analysis
  5. AttacksarXiv 2603.12277

    Prompt injection is role confusion

    提出 CoT Forgery，经用户消息或工具输出注入伪造推理

    arXiv
    2603.12277
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Attacker
    Black-box
    Evaluated models
    gpt-oss-20b, gpt-oss-120b, o4-mini and others11
    Abstract提示注入被作者解释为角色感知失败：听起来像某角色，就在表示里成为该角色。

    作者把提示注入解释成角色感知失败：标签划出的权限没有进入模型的内部几何。

    Paper analysisRead analysis
You have reached the end