{"data":{"id":"0ec84868-5ac3-4084-81b3-8d70d1789018","title":"Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini","summary":"Researchers discovered cryptographic context injection, an attack where encrypted prompts bypass safety guardrails (automated systems that block harmful requests) in AI models like Grok and Gemini. The attack works by hiding malicious instructions inside encrypted text, which safety filters cannot read, then decrypting it inside the model's code execution sandbox (a contained environment where code runs safely), allowing the AI to follow harmful instructions it would normally refuse. The attack can be delivered directly to chat or indirectly through weaponized web pages that trick AI agents into processing the encrypted payload.","solution":"Adversa's report includes prevention advice for defenders, but the source text does not explicitly describe or quote any specific mitigation steps, fixes, or updates.","labels":["security","safety"],"sourceUrl":"https://www.securityweek.com/encrypted-prompts-bypass-ai-safety-guardrails-in-grok-and-gemini/","publishedAt":"2026-08-21T14:34:05.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["jailbreak","prompt_injection"],"issueType":"news","affectedPackages":null,"affectedVendors":["xAI","Google"],"affectedVendorsRaw":["xAI","Grok","Google","Gemini","Adversa AI"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-08-21T14:34:05.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","safety"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}