Extracting System Prompts of LLM Services via Hierarchical Optimization
LLM Services
Researchers study prompt extraction attacks targeting modern complex and agentic LLM services. The work proposes hierarchical optimization techniques to recover lengthy, highly structured system prompts containing tool schemas and guardrails.
why this severityResearch paper demonstrating a prompt extraction technique with no live exploitation reported.
- first report
- 4 Nov 2026
- last update
- 4 Nov 2026
Timeline · 1
Sources · 1
Research and catalogues
- 2026-11-04
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Research
- AI role
- Attack on AI
- categories
- Data leak
- severity
- 1 · Research / proof of concept
- targets
- Open-weight model, Framework / tooling
- owasp llm top 10
- LLM02:2025 Sensitive Information Disclosure
- mitre atlas
- no technique for these categories
- dates
- happened 4 Nov 2026 · first reported 4 Nov 2026
- origin
- News & research feeds
- record
- confidence 0.90 · created 2026-11-04 15:36Z · updated 2026-11-04 15:36Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Extracting System Prompts of LLM Services via Hierarchical Optimization https://gcdradar.vercel.app/incidents/extracting-system-prompts-of-llm-services-via-hierarchical-o · AIR-2026-1756 · live - Lane: Research - Severity: 1 (Research / proof of concept): Research paper demonstrating a prompt extraction technique with no live exploitation reported. - Fix status: Fix status unknown - First reported: 2026-11-04 - AI role: Attack on AI - Products: LLM Services ## Summary Researchers study prompt extraction attacks targeting modern complex and agentic LLM services. The work proposes hierarchical optimization techniques to recover lengthy, highly structured system prompts containing tool schemas and guardrails. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-11-04: Extracting System Prompt of LLM Services in Complex (Agentic) Settings: Hierarchical Optimization and Reliable Evaluation Metrics (https://arxiv.org/abs/2611.04803) ## Sources - 2026-11-04 arXiv: Extracting System Prompt of LLM Services in Complex (Agentic) Settings: Hierarchical Optimization and Reliable Evaluation Metrics https://arxiv.org/abs/2611.04803 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closedMicrosoft 365 Agents SDK CVE-2026-109485 Microsoft 365 Agents SDK Information Disclosure Vulnerability
Patch now · Disclosed · since 10 Nov 2026 · CVE-2026-109485
AI - liveRAG SNAPRAG: Cost-efficient knowledge extraction attack on RAG systems via adversarial perturbations
Research · since 10 Nov 2026
AI - liveSGLang SGLang RCE Exploit Breaches NEAR AI, Steals Data From 18 Agents
Breaches & attacks · Exploited · since 8 Nov 2026
AI - liveVision Transformers Breaking the Privacy Promise: Gradient Inversion Attacks on Federated Low-Rank Adapted Vision Transformers
Research · since 9 Nov 2026
AI - liveTemporal Membership Inference Attack on Continuously Updated Models
Research · since 5 Nov 2026
AI - livePrompt Stealing Attacks on Synthetic Video Generation Models
Research · since 3 Nov 2026
AI