Skip to main content
LLM Security Database
Skip to research search
Last analyzed Sep 9, 2026

Language Model Security Database

985 research findings · 1119 evaluated models

Filtered research findings

53 entries

Matches every word across titles, descriptions, sources, affected systems, and models.

Context-Shifting Code Injection

Published Analyzed Source: arXiv

Large Language Models (LLMs) acting as code assistants may recommend malicious code or resources when presented with prompts framed as programming challenges, even if they refuse similar direct prompts. This occurs due to insufficient context-aware safety mechanisms. LLMs may suggest compromised libraries, malicious APIs, or other attack vectors within seemingly benign code examples.

Hallucinating AI Hijacking Attack: Large Language Models and Malicious Code Recommenders
Evaluated models: GPT-4

RoleBreak Character Jailbreak

Published Analyzed Source: arXiv

Large Language Models (LLMs) used in role-playing systems are vulnerable to character hallucination attacks, a form of jailbreak exploiting "query sparsity" and "role-query conflict". Query sparsity occurs when prompts fall outside the model's training data distribution, causing it to generate out-of-character responses. Role-query conflict arises when the prompt contradicts the established character persona, leading to inconsistent behavior. These vulnerabilities allow attackers to elicit…

RoleBreak: Character Hallucination as a Jailbreak Attack in Role-Playing Systems
Evaluated models: Claude 3 Haiku, GPT-3.5 Turbo, Llama 3 8B+1 more
  • Claude 3 Haiku
  • GPT-3.5 Turbo
  • Llama 3 8B
  • Mistral 7B Instruct v0.2

LLM Robot Bias & Violence

Published Analyzed Source: arXiv

Large Language Models (LLMs) used to control robots exhibit biases leading to discriminatory and unsafe behaviors. When provided with personal characteristics (e.g., race, gender, disability), LLMs generate biased outputs resulting in discriminatory actions (e.g., assigning lower rescue priority to certain groups) and accept or deem feasible dangerous or unlawful instructions (e.g., removing a person's mobility aid).

Llm-driven robots risk enacting discrimination, violence, and unlawful actions
Evaluated models: GPT-3.5, GPT-3.5 Turbo, GPT-4+1 more
  • GPT-3.5
  • GPT-3.5 Turbo
  • GPT-4
  • Mistral 7B

Research methodology

Entries summarize publicly available primary-source security research. Model names reflect only systems explicitly evaluated by the cited paper, and measurements are research-reported unless independent verification is stated.

Discovery and publication are separate: new papers enter a candidate queue, then require human review and explicit approval before publication. Updates follow that review process, not a guaranteed daily publishing schedule. “Last analyzed” is the newest analysis date among published entries; it does not mean that all recent research has been covered.