Divide and Inject: Can Agents Reconstruct an Indirect Prompt Injection from Fragments?

arXiv:2609.36576v1 Announce Type: new Abstract: Agentic systems are now being widely used to orchestrate tools and reason over long contexts. However, the improving capabilities of the large language models powering these agents also create new attack surfaces