NeurIPS 2026 Handbook bans prompt‑injection attacks in LLM‑assisted reviews
The official NeurIPS 2026 main‑track handbook explicitly prohibits authors from embedding hidden prompts aimed at manipulating LLM‑based reviewers, labeling such prompt‑injection attacks as a breach of review policy. This warning targets reciprocal reviewing practices and follows similar concerns raised at ICML.