Last analyzed 9/9/2026

Language Model Security Database

Explore primary-source AI security research, evaluated models, attack techniques, and defensive evidence.

985 research findings · 1123 evaluated models

Findings

985

Models evaluated

1123

Paper-evaluated models

Any selected model can match.

Refine by category

Findings match every selected category.

Attack Type

Attack Context2 selected

Architecture Components

Attack Surface

Impact

Advanced filters

Published fromPublished through

Research indexed from arXiv.

Evidence status

Filtered research findings

1 entry

Matches every word across titles, descriptions, sources, affected systems, and models.

Agent Data Injection via Trusted-Metadata Spoofing

Published 7/6/2026

Analyzed 7/20/2026

Agent data injection (ADI) is a reproducible indirect injection class in which attacker-controlled external content is formatted to resemble trusted metadata or agent-context structure. The paper reports that probabilistic delimiter injection can cause agents to misinterpret untrusted content as trusted element IDs, author identities, or tool responses, leading to unintended clicks, command execution, or PR merges. Safe defensive reproduction should use the authors’ synthetic LLM/AgentDojo…

Agent Data Injection Attacks are Realistic Threats to AI Agents

Evaluated models: GPT-5.2, GPT-5 Mini, Claude Opus 4.5 +3 more

Source: arXiv

Research methodology

Entries summarize publicly available primary-source security research. Model names reflect only systems explicitly evaluated by the cited paper, and measurements are research-reported unless independent verification is stated.