Sources
- atlas.mitre.orghttps://atlas.mitre.org/studies/AML.CS0038
- embracethered.comhttps://embracethered.com/blog/posts/2024/llm-context-pollution-and-delayed-automated-to…
Case study data from MITRE ATLAS, used under the Apache License 2.0.
Embrace the Red demonstrated that Google Gemini is susceptible to automated tool invocation by delaying the execution to the next conversation turn. This bypasses a security control that restricts Gemini from invoking tools that can access sensitive user information in the same conversation turn that untrusted data enters context.
Case study data from MITRE ATLAS, used under the Apache License 2.0.
Spot an error, or know a record we should add? Members can propose additions and submit corrections.