Skip to content

Hide Navigation Hide TOC

Structured Data Injection via JSON/CSV Payloads - ATR-2026-00084 (ac7a0d65-a8fb-58b0-8146-c6bf01481feb)

Detects prompt injection payloads hidden within structured data formats such as JSON, CSV, XML, or YAML. Attackers embed malicious instructions inside data field values, exploiting the assumption that structured data is safe and bypassing text-pattern detection that does not parse nested structures.

Cluster A Galaxy A Cluster B Galaxy B Level
LLM Prompt Injection (19cd2d12-66ff-487c-a05c-e058b027efc9) MITRE ATLAS Attack Pattern Structured Data Injection via JSON/CSV Payloads - ATR-2026-00084 (ac7a0d65-a8fb-58b0-8146-c6bf01481feb) Agent Threat Rules 1