ATLASAML.T0051.001
ATLAS index
AML.T0051.001

Indirect

An adversary may inject prompts indirectly via separate data channel ingested by the LLM such as include text or multimedia pulled from databases or websites. These malicious prompts may be hidden or obfuscated from the user. This type of injection may be used by the adversary to gain a foothold in the system or to tar

Framework
MITRE ATLAS
Maturity
Demonstrated
Platforms
Generative AI, Agentic AI
Release
2026.05

Overview

An adversary may inject prompts indirectly via separate data channel ingested by the LLM such as include text or multimedia pulled from databases or websites. These malicious prompts may be hidden or obfuscated from the user. This type of injection may be used by the adversary to gain a foothold in the system or to target an unwitting user of the system.

Sources

  1. MITRE ATLAS AML.T0051.001: Indirect — MITRE