Skip to content
ATR-2026-00080highPrompt Injectiondraft

Encoding-Based Prompt Injection Evasion

Detects prompt injection attempts that use encoding techniques to bypass text-based detection rules. Attackers encode malicious payloads using base64, hex, Unicode escapes, Punycode, or RTL override characters to smuggle instructions past regex-based filters.

Severity
high
Category
Prompt Injection
Scan Target
mcp
Author
ATR Community (MiroFish Predicted)

Response Actions

block inputalertescalatesnapshot

References

MITRE ATLAS
AML.T0051