Manipulating Multimodal Agents via Cross-Modal Prompt Injection
Date: 2025-04
Affected: Multimodal LLM agents (GPT-4V/4o, Claude 3.5)
Attack vector: prompt-injection
Category: research
Severity: High

Cross-modal injection where a benign-looking image plus benign text jointly induce adversarial agent behavior, defeating single-modality defenses.


Mitigations:

Architectural layers (MAESTRO):