Skip to content
AgentProv

2024-10-17 · 2024-Q4

Imprompter Attack on AI Chatbots

Who actually said "do this"?

The question layer 2 asks, and failed here.
Fixable
Vendor patch
Vendor response
Patched
In the wild
No
Actor
Attacker

Target

Mistral LeChat, ChatGLM, Meta Llama

Impact

80% success rate exfiltrating PII via obfuscated adversarial prompts and hidden Markdown image URLs

Root cause

Multi-lingual token substitution generates human-unreadable but LLM-executable malicious prompts

Sources

Catalog

Cite this: AgentProv incident record: Imprompter Attack on AI Chatbots (2024-10-17). https://agentprov.com/incidents/2024-10-17-imprompter-attack-on-ai-chatbots