Prompt injection

Prompt injection is an attack that hides instructions in something an AI model reads, such as a web page, an email or a file, so that the model follows them as if its user had asked. It works because a model takes in instructions and data as the same kind of text. Defenses reduce the risk, but vendors including Meta and OpenAI say they don't eliminate it.

Related coverage