SoK: PIAtlas: Decomposing the Unbounded Prompt Injection Attack Space

Summary

This Systematization of Knowledge presents PIAtlas, a taxonomy of prompt injection attacks organized by how the injected instruction is constructed to subvert the model, with six classes forming the roots of a hierarchy of techniques. The authors release PICorpus and map thousands of records from more than twenty public datasets to PIAtlas under a human-verified protocol. The mapping finds that attacks usually combine techniques from a few mechanisms and that widely used agent benchmarks test only part of the attack space.

Topics

• Prompt injection and jailbreaks

Related items

• HighCVE-2026-77926: Aix-DB remote code execution through ChatBI common agent execute toolSimilar attack · NVD/CVE Database
• HighCVE-2026-109440: LangAlpha indirect prompt injection through agent-retrieved web contentSimilar attack · NVD/CVE Database
• HighCVE-2026-107366: IBM Langflow OSS message endpoints lack ownership verificationSimilar attack · NVD/CVE Database
• HighCVE-2026-112308: crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows…Similar attack · NVD/CVE Database
• InfoFake News, Real Crashes: Information Injection Attacks on LLM Financial Trading AgentsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)