New Prompt Injection Techniques Cover Agent-Planning Attacks

Summary

CrowdStrike has released a new version of its Prompt Injection Taxonomy, which adds techniques that target how autonomous agents plan and how models decide which rules apply, bringing the public taxonomy to 222 techniques. The article illustrates the risk with a hypothetical in which a poisoned test utility persuades a coding agent to send local config files, including credentials, to an outside diagnostics endpoint. It introduces two new methods, Goal Decomposition Exploitation and Constraint-Driven Task Steering, along with Output Exclusion Prompting and Session State Spoofing.

Topics

• AI agents
• Prompt injection and jailbreaks

Related items

• HighCVE-2026-119050: Agno PandasTools unsafe reflection allows code execution via prompt injectionSimilar attack · NVD/CVE Database
• Low3 Ways AI Agents Already Operate in Your BrowserSimilar attack · BleepingComputer
• InfoAdversa AI Launches Coding Agent Security Platform to Block Cyberattacks on AI Agents in Real TimeSimilar attack · Adversa AI Blog
• HighCVE-2026-115415 - Secret masking bypass in the environment tool in Strands Agents ToolsSimilar attack · AWS Security Bulletins
• InfoThe ADLC maturity model: 5 stages of agentic development security | Endor LabsSimilar attack · Endor Labs Blog