Prompt Injection Attack Success on LLM Behavior
100Injection Rate (IR)GPT-5.4
Evaluation Results
| Method | Links | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| GPT-5.4Query Proximity=Goal-Distant2026.05 | 100 | 51 | 6 | 16.7 | 0 | 8.5 | 1 | 0 | |
| GPT-5.5Query Proximity=Goal-Adjacent2026.05 | 100 | 99 | 95 | 61.1 | 54 | 60.5 | 58 | 54 | |
| GPT-5.5Query Proximity=Goal-Distant2026.05 | 100 | 40 | 5 | 0 | 0 | 0 | 0 | 0 | |
| Kimi-K2.6Query Proximity=Goal-Distant2026.05 | 100 | 41 | 7 | 14.3 | 5 | 5.9 | 1 | 5 | |
| Kimi-K2.6Query Proximity=Goal-Adjacent2026.05 | 99 | 98 | 94.9 | 73.4 | 77.8 | 71.2 | 69 | 77 | |
| GPT-5.4Query Proximity=Goal-Adjacent2026.05 | 94 | 98.9 | 95.7 | 45.6 | 43.6 | 42.4 | 41 | 41 | |
| Gemini-3.1Query Proximity=Goal-Adjacent2026.05 | 92 | 97.8 | 96.7 | 83.1 | 87 | 74.8 | 73.9 | 80 | |
| Gemini-3.1Query Proximity=Goal-Distant2026.05 | 89 | 41.6 | 4.5 | 0 | 4.5 | 0 | 0 | 4 | |
| Sonnet-4.6Query Proximity=Goal-Adjacent2026.05 | 72 | 98.6 | 87.5 | 82.5 | 73.6 | 58.6 | 52 | 53 | |
| Sonnet-4.6Query Proximity=Goal-Distant2026.05 | 69 | 34.8 | 7.2 | 0 | 1.4 | 0 | 0 | 1 |