CLIC: Closed-Loop Intent Consistency for Securing LLM-Driven Control in Open RAN

# CLIC: Closed-Loop Intent Consistency for Securing LLM-Driven Control in Open RAN

https://gcdradar.vercel.app/incidents/clic-closed-loop-intent-consistency-for-securing-llm-driven · AIR-2026-1709 · live

- Lane: Research
- Severity: 1 (Research / proof of concept): Research paper demonstrating prompt injection against O-RAN controllers.
- Fix status: Fix status unknown
- First reported: 2026-11-02
- AI role: Attack on AI
- Products: O-RAN RIC

## Summary

Researchers demonstrate runtime prompt injection and residual virtual prompt injection attacks against LLM-driven control loops in Open RAN networks. The findings show how injected intents can manipulate resource management and slicing decisions without breaching interface authentication.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Affected and fixed versions

- Affected: O-RAN RIC

## Latest updates

- 2026-11-02: CLIC: Closed-Loop Intent Consistency for Securing LLM-Driven Control in Open RAN (https://arxiv.org/abs/2610.40744)

## Sources

- 2026-11-02 arXiv: CLIC: Closed-Loop Intent Consistency for Securing LLM-Driven Control in Open RAN https://arxiv.org/abs/2610.40744

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.