Indirect Prompt Injection — AI Glossary

Indirect prompt injection is a security vulnerability in which malicious instructions are embedded in content the model retrieves — a web page, email, PDF, or database row — rather than typed by the end user. When the model processes the retrieved content, it can treat the embedded instructions as legitimate system instructions and execute them, including tool calls or exfiltration.