Synthèse
It should be classified as a vulnerability, not just a limitation. "A vulnerability where an AI system or component is unable to distinguish between instructions and data."— Is Prompt Injection a Vulnerability?, November 2025 Analysis: The industry shifted. Prompt injection now receives CVE assignments. 24 CVEs in December 2025 alone. Microsoft formally documents their defenses. Debate settled. VERDICT: Called it—now a formal vulnerability class.
It should be classified as a vulnerability, not just a limitation. "A vulnerability where an AI system or component is unable to distinguish between instructions and data. "— Is Prompt Injection a Vulnerability? , November 2025 Analysis: The industry shifted. Prompt injection now receives CVE assignments.
24 CVEs in December 2025 alone. Microsoft formally documents their defenses. Debate settled. VERDICT: Called it—now a formal vulnerability class.
Source originale
danielmiessler.com
Prompt Injection as attack and mechanism
· 25 nov.
Prompt Injection Isn't a Vulnerability (Most of the Time)
· 25 nov.
Prompt Injection as attack and mechanism
· 25 nov.
Prompt Injection as attack and mechanism
· 25 nov.
Prompt Injection as attack and mechanism
· 25 nov.
Prompt Injection Isn't a Vulnerability (Most of the Time)
· 25 nov.
Prompt Injection as attack and mechanism
· 25 nov.
Prompt Injection as attack and mechanism
· 25 nov.
CORTEX