Updated 7/21/2026

Language Model Security Database

Explore primary-source AI security research, evaluated models, attack techniques, and defensive evidence.

959 research findings · 1077 evaluated models

Findings

959

Models evaluated

1077

Paper-evaluated models

Any selected model can match.

Refine by category

Findings match every selected category.

Attack Type1 selected

Attack Context1 selected

Architecture Components

Attack Surface1 selected

Impact

Advanced filters

Published fromPublished throughSource or venue

arXiv is the only currently indexed source.

Evidence status

Filtered research findings

1 entry

Matches every word across titles, descriptions, sources, affected systems, and models.

MCP Tool-Metadata Prompt Injection in Coding Agents

Updated 7/20/2026

The paper presents a controlled, reproducible evaluation in which untrusted MCP tool descriptions contain hidden instructions that attempt to induce coding agents to access files, invoke other tools, create deceptive links, or execute remote scripts. The authors report that several clients accepted poisoned metadata without adequate validation or parameter visibility; Cursor 1.6.45 was reported unsafe across all four tested vectors. These are paper-reported results from isolated local tests…

Are AI-assisted Development Tools Immune to Prompt Injection?

Affects: Claude Sonnet 4.5, Grok Code Fast 1, Gemini 2.5 Pro +1 more

Source: arXiv

Research methodology

Entries summarize publicly available primary-source security research. Model names reflect only systems explicitly evaluated by the cited paper, and measurements are research-reported unless independent verification is stated.