ATR-2026-00081criticalPrompt Injectiondraft
Semantic Evasion via Multi-Turn Prompt Injection
Detects multi-turn prompt injection attacks that use semantic manipulation to bypass regex-based detection. Attackers split malicious instructions across multiple turns, use synonyms and paraphrasing, or embed instructions within seemingly benign conversational context to evade pattern matching.
嚴重度
critical
類別
Prompt Injection
掃描目標
mcp
作者
ATR Community (MiroFish Predicted)
建議回應
block inputquarantine sessionalertescalatekill agent
參考資料
MITRE ATLAS
AML.T0051