Prompt Injection via Images
Multimodal AI systems can interpret screenshots, scanned documents, charts, and photographs to summarize reports, extract data, or answer questions about an interface. This capability also opens another path for prompt injection. An image may contain instructions intended for the model rather than the viewer. If treated as authoritative, they can influence its behavior. The danger grows when the model can use existing permissions to access private information, call tools, or take actions.
Read More
| Share
