gcdRadar
live/Research/AIR-2026-1756
liveliveResearch1 Research / proof of conceptAI

Extracting System Prompts of LLM Services via Hierarchical Optimization

LLM Services

Researchers study prompt extraction attacks targeting modern complex and agentic LLM services. The work proposes hierarchical optimization techniques to recover lengthy, highly structured system prompts containing tool schemas and guardrails.

why this severityResearch paper demonstrating a prompt extraction technique with no live exploitation reported.

first report
4 Nov 2026
last update
4 Nov 2026

Timeline · 1

  1. 4 Nov 2026Extracting System Prompt of LLM Services in Complex (Agentic) Settings: Hierarchical Optimization and Reliable Evaluation Metrics

Sources · 1

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
Attack on AI
categories
Data leak
severity
1 · Research / proof of concept
targets
Open-weight model, Framework / tooling
mitre atlas
no technique for these categories
dates
happened 4 Nov 2026 · first reported 4 Nov 2026
origin
News & research feeds
record
confidence 0.90 · created 2026-11-04 15:36Z · updated 2026-11-04 15:36Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Extracting System Prompts of LLM Services via Hierarchical Optimization

https://gcdradar.vercel.app/incidents/extracting-system-prompts-of-llm-services-via-hierarchical-o · AIR-2026-1756 · live

- Lane: Research
- Severity: 1 (Research / proof of concept): Research paper demonstrating a prompt extraction technique with no live exploitation reported.
- Fix status: Fix status unknown
- First reported: 2026-11-04
- AI role: Attack on AI
- Products: LLM Services

## Summary

Researchers study prompt extraction attacks targeting modern complex and agentic LLM services. The work proposes hierarchical optimization techniques to recover lengthy, highly structured system prompts containing tool schemas and guardrails.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-11-04: Extracting System Prompt of LLM Services in Complex (Agentic) Settings: Hierarchical Optimization and Reliable Evaluation Metrics (https://arxiv.org/abs/2611.04803)

## Sources

- 2026-11-04 arXiv: Extracting System Prompt of LLM Services in Complex (Agentic) Settings: Hierarchical Optimization and Reliable Evaluation Metrics https://arxiv.org/abs/2611.04803

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed
    AI
  2. live
    AI
  3. live
    SGLang SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents

    Breaches & attacks · Exploited · since 8 Nov 2026

    AI
  4. live
    AI
  5. live
    AI
  6. live
    AI