Adaptive Prompt Injection Attacks Scaled Using Agent Swarms
Gemini
Researchers demonstrated an automated technique using agent swarms to generate adaptive prompt injections against frontier models. The method successfully bypassed safety controls on systems including the Gemini model family.
why this severityOffensive research demonstrating adaptive prompt injection without reported real-world exploitation.
- first report
- 10 Nov 2026
- last update
- 10 Nov 2026
Timeline · 1
Sources · 1
Research and catalogues
- 2026-11-10Scaling Adaptive Prompt Injection Attacks with Agent SwarmsarXiv · arxiv.org/abs/2611.11861
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Research
- AI role
- Attack on AI
- categories
- Prompt injectionAgent hijack
- severity
- 1 · Research / proof of concept
- targets
- Google, Open-weight model
- owasp llm top 10
- LLM01:2025 Prompt InjectionLLM06:2025 Excessive Agency
- dates
- happened 10 Nov 2026 · first reported 10 Nov 2026
- origin
- News & research feeds
- record
- confidence 0.90 · created 2026-11-11 03:11Z · updated 2026-11-11 03:11Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Adaptive Prompt Injection Attacks Scaled Using Agent Swarms https://gcdradar.vercel.app/incidents/adaptive-prompt-injection-attacks-scaled-using-agent-swarms · AIR-2026-1881 · live - Lane: Research - Severity: 1 (Research / proof of concept): Offensive research demonstrating adaptive prompt injection without reported real-world exploitation. - Fix status: Fix status unknown - First reported: 2026-11-10 - AI role: Attack on AI - Products: Gemini ## Summary Researchers demonstrated an automated technique using agent swarms to generate adaptive prompt injections against frontier models. The method successfully bypassed safety controls on systems including the Gemini model family. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-11-10: Scaling Adaptive Prompt Injection Attacks with Agent Swarms (https://arxiv.org/abs/2611.11861) ## Sources - 2026-11-10 arXiv: Scaling Adaptive Prompt Injection Attacks with Agent Swarms https://arxiv.org/abs/2611.11861 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closedGemini Prompt-Based Attacks Against Gemini via Calendar Invitations
Research · since 6 Aug 2025
AI - closedGemini Google Gemini Delayed Tool Invocation Bypass
Research · since Feb 2024 (approx.)
AI - liveCapLite: Evaluating Prompt-Injection Vulnerabilities in Small Language Models
Research · since 13 Nov 2026
AI - liveGLM-5.3 I Think, Therefore I Attack: Evaluating Thought Injection Attacks on Reasoning Agents
Research · since 9 Nov 2026
AI - liveBeyond Instruction Override: Benchmarking Indirect Prompt Injection
Research · since 6 Nov 2026
AI - closedOpenClaw Empirical Study of Security Concerns in OpenClaw Agentic Systems
Research · since 27 Oct 2026
AI