Third-Party AI Chatbot Plugin Prompt Injection Risks
Date: 2025-11
Affected: Third-party Chatbot Plugins (multiple)
Attack vector: prompt-injection
Category: research
Severity: High

IEEE S&P 2026 paper analyzed 17 third-party chatbot plugins on 10K+ websites: 15 plugins enable indirect prompt injection by mixing trusted/untrusted content in tool context, no separation enforced.


Mitigations:

Architectural layers (MAESTRO):