AINewsnow

A web page wrote a system prompt. The model obeyed it. (CVE-2026-61732)

This story is from 2026-09-26. It is preserved in the archive; the latest stories are on the live feed.

Under BYOK, most self-hosted inference stacks do not filter those literals by default. The chain An attacker plants one string on a target web page. The recon agent crawls it and passes the text through untouched. The tokenizer parses the literal as a real role boundary. The model reads a new opera…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-09-26 17:08 · DEV Community — AI
    A web page wrote a system prompt. The model obeyed it. (CVE-2026-61732)

More stories

  1. Introducing Gemini 3.8 Live with Live Avatar — Google Gemini Blog
  2. Accelerating vision-language models with LFM2.5-VL-DSpark — Hugging Face Blog
  3. OpenAI’s A.I. Went Rogue and Meddled With U.S. Government Websites — New York Times AI
  4. GPT‑6 Sol and Luna: Cheaper, but Worse Where It Matters — r/OpenAI
  5. OpenAI agent ‘hacked’ Australian Govt Medicare portal, PM Albanese calls it ‘unacceptable’: What happened? — Mint AI
  6. Meet the Data Agent in ChatGPT Work — OpenAI YouTube
  7. Unsecured OpenAI agents posted 53 user images on the internet without the lab's knowledge — TechCrunch AI
  8. Appeals Court Lets the Pentagon Designate Anthropic a Supply-Chain Risk — Wired AI

Get the daily brief of stories like this at 6:30 every morning →