Skip to content
ATR-2026-00081criticalPrompt Injectiondraft

Semantic Evasion via Multi-Turn Prompt Injection

Detects multi-turn prompt injection attacks that use semantic manipulation to bypass regex-based detection. Attackers split malicious instructions across multiple turns, use synonyms and paraphrasing, or embed instructions within seemingly benign conversational context to evade pattern matching.

嚴重度
critical
類別
Prompt Injection
掃描目標
mcp
作者
ATR Community (MiroFish Predicted)

建議回應

block inputquarantine sessionalertescalatekill agent

參考資料

MITRE ATLAS
AML.T0051