Imprompter: Tricking LLM Agents into Improper Tool Use
Date: 2024-10
Affected: Mistral LeChat, ChatGLM
Attack vector: prompt-injection
Category: research
Severity: Critical

Fu et al. develop Imprompter, automatically-computed obfuscated adversarial prompts that exfiltrate user PII from LLM agents via tool-call abuse. End-to-end exploit against Mistral LeChat achieves ~80 percent success.


Mitigations:

Architectural layers (MAESTRO):