AI RESEARCH
PARASITE: Conditional System Prompt Poisoning to Hijack LLMs
arXiv CS.AI
•
ArXi:2505.16888v4 Announce Type: replace-cross Large Language Models (LLMs) are increasingly deployed via third-party system prompts downloaded from public marketplaces. We identify a critical supply-chain vulnerability: conditional system prompt poisoning, where an adversary injects a ``sleeper agent'' into a benign-looking prompt.