The Devil is in the Context: Nine Dimensions of Prompt Injection Attacks

Summary

Researchers present a taxonomy of nine dimensions along which prompt injection attacks differ, covering the injected instruction, its relation to the user's task, and how it appears in the target system. Applied to six real-world vulnerabilities and nine benchmarks, the taxonomy shows most benchmarks cover only a small region of the space, and 13% of pairwise category combinations remain untested. The authors also show it can support automated benchmark annotation and targeted test generation.

Topics

• Prompt injection and jailbreaks

Related items

• InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
• InfoHow to Turn AI Red Team Findings Into Runtime ControlsSimilar attack · Straiker Blog
• MediumDocker Sandboxes vulnerability lets AI agents access sensitive files outside their sandbox (CVE-2026-103916) | Endor LabsSimilar attack · Endor Labs Blog
• MediumFree the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak BundlesSimilar attack · Check Point Research
• InfoRight Tool, Wrong Parameters: Defending LLM Agents Against Parameter PoisoningSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)