Data Exfiltration Through Context

A form of Data Exfiltration where an attacker uses Indirect Prompt Injection embedded in retrieved content or tool output to trick an LLM agent into leaking sensitive context, credentials or prior conversation data, made more practical as agents gain browsing and tool-calling capabilities.