The Window Is in the Reasoning: When LLM Agents Decide to Follow Prompt Injections.

arXiv:2610.24048v1 Announce Type: cross Abstract: LLM agents that read untrusted content can be hijacked by prompt injections. Runtime monitors that try to catch a hijack before the agent acts, and benchmarks that score each task with a single run, share an as