Unverified50% confidenceFactExact time
When an injection signal appears in a non-result-bearing field (such as description, name, or source), attest escalates the severity to critical and renames it to indicate the location (for example, injection_in_data_field:description).
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/18/2026
First Seen
Valid until: 1/16/2027
Sources
Related Entities
Related Claims
UnverifiedUniformly labeling external input as untrusted data is one of the industry's primary defenses against prompt injection risks.66% similarVerifiedPrompt injection is essentially an architectural flaw in which large language models cannot distinguish data from instructions, analogous to traditional SQL injection in which the database engine confuses data with SQL instructions.66% similarVerifiedPrompt injection is essentially an instruction hijacking attack that exploits the structural flaw of LLMs being unable to distinguish system instructions from user data at the semantic level, and is conceptually similar to SQL injection.62% similarUnverifiedPrompt injection exploits a fundamental flaw: the blurred boundary between "data" and "instructions"62% similarUnverified新接入的文档或知识库更新可能引入提示注入或数据投毒的新入口62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1057937API
curl https://kongchang.com/api/v1/knowledge/claims/1057937MCP
get_claim(id=1057937)