ATR-2026-00081criticalPrompt Injectiondraft
Semantic Evasion via Multi-Turn Prompt Injection
Detects multi-turn prompt injection attacks that use semantic manipulation to bypass regex-based detection. Attackers split malicious instructions across multiple turns, use synonyms and paraphrasing, or embed instructions within seemingly benign conversational context to evade pattern matching.
Severity
critical
Category
Prompt Injection
Scan Target
mcp
Author
ATR Community (MiroFish Predicted)
Response Actions
block inputquarantine sessionalertescalatekill agent
References
MITRE ATLAS
AML.T0051