{"data":{"id":"02cb4b71-91d3-439f-acfc-563e1e4d57b2","title":"CapLite: Prompt-Injection Defense for Small Language Model Agents without Model-Written Security Artifacts","summary":"Researchers tested whether small language model (SLM) agents can reliably write the security artifacts that enforcement defenses such as CaMeL, Progent, IPIGuard and DRIFT depend on. Across 15 open-weight models, the artifacts written by the agent's own model admitted attacks on 14 (Progent), 13 (IPIGuard) and 11 (DRIFT) of the models, and CaMeL's programs failed to run in up to 68% of episodes. The proposed CapLite derives its policy from tool schemas and admits writes only when the deciding arguments appear in the user's request, with no attack succeeding in 13,935 attacked AgentDojo episodes.","solution":"N/A -- no mitigation discussed in source.","labels":["research","security"],"sourceUrl":"https://arxiv.org/abs/2611.17115v1","publishedAt":"2026-11-12T17:07:22.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["prompt_injection"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-12T17:07:22.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":["AML.T0051"]}}