Erase the Injected Region: Multimodal Prompt-Injection Defense with On-Policy Self-Distillation.

arXiv:2610.41307v1 Announce Type: cross Abstract: Multimodal indirect prompt injection embeds malicious instructions in external media that also contains information needed for the user's task. Existing defenses can block the attack yet impair the model's use