HouYi: Prompt Injection Attack Against LLM-Integrated Applications
Date: 2023-06
Affected: Notion, 31 commercial LLM applications
Attack vector: prompt-injection
Category: research
Severity: Critical

Liu et al. introduce HouYi, a black-box prompt injection technique combining a pre-constructed prompt, context-partition injection, and a malicious payload. Tested on 36 real LLM-integrated apps; 31 were vulnerable, with 10 vendors confirming (including Notion).


Mitigations:

Architectural layers (MAESTRO):