New Research Exposes Why LLMs Fall for Prompt Injection

A new paper reveals that LLMs don't truly understand role tags, making them vulnerable to prompt injection. Researchers found models learn text style rather than instructions, so role boundaries are continuous and easily manipulated. They warn that without genuine role perception, injection defense will remain a losing battle.