Skip to main content
LLM Security Database
Skip to research search
Last analyzed Sep 9, 2026

Language Model Security Database

985 research findings · 1119 evaluated models

Filtered research findings

1 entry

Matches every word across titles, descriptions, sources, affected systems, and models.

Chained Guardrail Bypass

Published Analyzed Source: arXiv

Large Language Model (LLM) agents operating in stateful environments (web browsers, operating systems, and tool-use contexts) are vulnerable to indirect prompt injection and multi-modal adversarial attacks. These vulnerabilities arise when agents process untrusted environmental observations—such as web accessibility trees, screen screenshots, or database query results—that contain concealed malicious instructions. Specifically, attackers can embed prompt injections into HTML accessibility…

DoomArena: A Framework for Testing AI Agents Against Evolving Security Threats
Evaluated models: GPT-4o, GPT-4o Mini, Claude 3.5 Sonnet+2 more
  • GPT-4o
  • GPT-4o Mini
  • Claude 3.5 Sonnet
  • Claude 3.7 Sonnet
  • Llama Guard
Application layer
Prompt layer
Injection
Extraction

Research methodology

Entries summarize publicly available primary-source security research. Model names reflect only systems explicitly evaluated by the cited paper, and measurements are research-reported unless independent verification is stated.

Discovery and publication are separate: new papers enter a candidate queue, then require human review and explicit approval before publication. Updates follow that review process, not a guaranteed daily publishing schedule. “Last analyzed” is the newest analysis date among published entries; it does not mean that all recent research has been covered.