Preprint
Oct 2026
The Window Is in the Reasoning: When LLM Agents Decide to Follow Prompt Injections
LLM agents that read untrusted content can be hijacked by prompt injections. Runtime monitors that try to catch a hijack before the agent acts, and benchmarks that score each task with a single run, share an assumption: whether an agent follows an injection is settled when the injection is read. We test this assumption...
H. Jia, Yang Liu, Bin Chong et al.
· 1 citation