Prompt Injection May Be Unavoidable for Autonomous AI Agents
The authors prove an impossibility result: any defense that blocks malicious prompt injections can also block legitimate flows, and attackers can always craft contexts that make harmful prompts look benign. This means prompt injection may remain a fundamental vulnerability for autonomous AI agents, reshaping how we approach alignment and security.