CLIC: Closed-Loop Intent Consistency for Securing LLM-Driven Control in Open RAN

Summary

Researchers propose CLIC, a closed-loop intent-consistency layer for LLM-driven control in Open RAN that jointly mitigates runtime prompt injection and residual virtual prompt injection (VPI) attacks. CLIC uses a formal consistency score from a small quantized language model, deployed as a Non-RT rApp for model-integrity certification and a Near-RT xApp for runtime enforcement. On the OpenAI Cellular (OAIC) platform, it reduced attack success rate from 0.92 to 0.29 and residual VPI attacks from 0.37 to 0.04, at about 27 ms of added latency.

Mitigation

CLIC, a closed-loop intent-consistency layer: a Non-RT rApp for model-integrity certification and a Near-RT xApp for runtime enforcement, using a formal consistency score from a small quantized language model.

Topics

• Prompt injection and jailbreaks

Related items

• MediumTop AI coding agent security resources — November 2026Similar attack · Adversa AI Blog
• MediumHow We Took Over ChatGPT AccountsSimilar attack · Simon Willison's Weblog
• HighCVE-2026-62331: praktor path traversal via Telegram document upload filenamesSimilar attack · NVD/CVE Database
• HighCVE-2026-61789: DBHub read-only SQL validation bypass on MySQL and MariaDB connectorsSimilar attack · NVD/CVE Database
• InfoSecPO: Principled Adversarial Training for Prompt Injection SecuritySimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)