AML.T0011
User Execution

MITRE source definition

An adversary may rely upon a user to load, execute, interpret, or otherwise use a malicious or unsafe artifact. In AI systems, user execution may include loading a model or causing an inference runtime to process executable or behavior-shaping components bundled with an AI artifact. The resulting effect may include host code execution or malicious AI behavior.

Users may inadvertently execute unsafe code introduced via [AI Supply Chain Compromise](/techniques/AML.T0010).

Users may be subjected to social engineering to get them to execute malicious code by, for example, opening a malicious document file or link.

Source modified 2026-07-31. Reproduced from the pinned ATLAS release; inline technique links resolve to local reference pages.

Parent, sub-techniques and ATT&CK references

• AML.T0011.000 Unsafe AI Artifacts
• AML.T0011.001 Malicious Package
• AML.T0011.002 Poisoned AI Agent Tool
• AML.T0011.003 Malicious Link

Source-backed defensive context

MITRE mitigations

• AML.M0011 Restrict Library Loading
• AML.M0014 Verify AI Artifacts
• AML.M0016 Vulnerability Scanning
• AML.M0018 User Training
• AML.M0023 AI Bill of Materials

MITRE case studies

• AML.CS0018 Arbitrary Code Execution with Google Colab · Exercise
• AML.CS0044 LAMEHUG: Malware Leveraging Dynamic AI-Generated Commands · Incident
• AML.CS0060 Cross-Site Scripting via Prompt Manipulation in Lenovo AI Chatbot · Exercise

These are explicit source relationships, not independently reproduced incidents or validated detection coverage.

Simulation and telemetry boundary

This is a technique reference page, not a runnable simulation. No ATLAS-specific telemetry mapping, local attack execution or detector validation is asserted. MITRE maturity describes its source evidence, not a 1200km lab result.

For broader context—not technique-specific control mappings—see AI Security, AI Security Course, and detection-validation methodology.

Provenance and attribution

Immutable MITRE ATLAS source · Import provenance · Attribution and transformation notice · Apache License 2.0

Copyright 2021-2026 MITRE. Source text and explicit relationships are retained; navigation, formatting and local links are provided by 1200km.

No explicit relationship in this pinned source.