AML.T0051.000
Direct

MITRE source definition

An adversary may inject prompts directly as a user of the LLM. This type of injection may be used by the adversary to gain a foothold in the system or to misuse the LLM itself, as for example to generate harmful content.

Source modified 2026-05-27. Reproduced from the pinned ATLAS release; inline technique links resolve to local reference pages.

Parent, sub-techniques and ATT&CK references

• AML.T0051 LLM Prompt Injection — parent

Source-backed defensive context

MITRE mitigations

• AML.M0024 AI Telemetry Logging
• AML.M0033 Input and Output Validation for AI Agent Components
• AML.M0035 AI Red Team

MITRE case studies

• AML.CS0016 Achieving Code Execution in MathGPT via Prompt Injection · Exercise
• AML.CS0024 Morris II Worm: RAG-Based Attack · Exercise
• AML.CS0036 AIKatz: Attacking LLM Desktop Applications · Exercise
• AML.CS0041 Rules File Backdoor: Supply Chain Attack on AI Coding Assistants · Exercise
• AML.CS0043 Malware Prototype with Embedded Prompt Injection · Incident
• AML.CS0047 Code to Deploy Destructive AI Agent Discovered in Amazon Q VS Code Extension · Incident
• AML.CS0051 OpenClaw Command & Control via Prompt Injection · Exercise
• AML.CS0052 LLMSmith: RCE Vulnerabilities in LLM-Integrated Applications · Exercise
• AML.CS0060 Cross-Site Scripting via Prompt Manipulation in Lenovo AI Chatbot · Exercise
• AML.CS0062 RCE Vulnerability in Semantic Kernel Search Plugin · Exercise
• AML.CS0069 GTG-1002 Claude Code Espionage Campaign · Incident

These are explicit source relationships, not independently reproduced incidents or validated detection coverage.

Simulation and telemetry boundary

This is a technique reference page, not a runnable simulation. No ATLAS-specific telemetry mapping, local attack execution or detector validation is asserted. MITRE maturity describes its source evidence, not a 1200km lab result.

For broader context—not technique-specific control mappings—see AI Security, AI Security Course, and detection-validation methodology.

Provenance and attribution

Immutable MITRE ATLAS source · Import provenance · Attribution and transformation notice · Apache License 2.0

Copyright 2021-2026 MITRE. Source text and explicit relationships are retained; navigation, formatting and local links are provided by 1200km.

No explicit relationship in this pinned source.