Unverified50% confidenceFactExact time
In indirect prompt injection, the attack payload can lie dormant for weeks undetected, triggering when a code repository, document, or web page is automatically fetched by an agent.
1
Sources
50%
Confidence
Long-term
Relevance
10/16/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedIndirect prompt injection attacks plant hidden instructions within normal business data to induce Agents into executing unauthorized operations, representing a security risk at the semantic level rather than the code level.72% similarUnverifiedAn attacker can, by carefully arranging thread scheduling and system call timing, create a window between the permission check and the use of the resource, so that after the kernel 'passes the check' but before it uses the resource, the resource has already been replaced or freed. Such vulnerabilities are difficult to find through static code review and cannot be reliably reproduced by conventional fuzzing.72% similarUnverified勒索软件攻击者往往会在潜伏数周至数月后才触发加密程序，期间通过横向移动渗透备份系统、域控制器等关键节点70% similarUnverifiedShort-lived credentials (temporary tokens) automatically expire after a period of time, limiting the attack window even if they are leaked.70% similarUnverifiedLoading pickle files may expose systems to dangerous arbitrary code execution attacks.70% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1047826API
curl https://kongchang.com/api/v1/knowledge/claims/1047826MCP
get_claim(id=1047826)