Decision Dynamics of LLM Agents Following Prompt Injections

# Decision Dynamics of LLM Agents Following Prompt Injections

https://gcdradar.vercel.app/incidents/decision-dynamics-of-llm-agents-following-prompt-injections · AIR-2026-1420 · closed 2026-11-03

- Lane: Research
- Severity: 1 (Research / proof of concept)
- Fix status: Fix status unknown
- First reported: 2026-10-20
- AI role: Attack on AI

## Summary

Researchers used branching rollouts to analyze when and why LLM agents decide to follow prompt injections embedded in untrusted content. The findings challenge assumptions that compliance with injections is strictly determined at the moment of reading.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-10-20: The Window Is in the Reasoning: When LLM Agents Decide to Follow Prompt Injections (https://arxiv.org/abs/2610.24048)

## Sources

- 2026-10-20 arXiv: The Window Is in the Reasoning: When LLM Agents Decide to Follow Prompt Injections https://arxiv.org/abs/2610.24048

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.