The Vulnerability of LLM Rankers to Prompt Injection Attacks

arXiv:2602.16752 · cs.CR · Submitted 2026-02-18 · Read on arXiv

cs.CR

Submitted: 2026-02-18

Updated: 2026-02-18

Terminology

• Attack Success Rate (ASR) — 1× in this paper · explained in 3 episodes
• Decoder — 1× in this paper · explained in 2 episodes
• Language Models (LLMs) — 1× in this paper · explained in 2 episodes
• Large Language Models (LLMs) — 1× in this paper · explained in 9 episodes
• Prompt Injection Attacks — 1× in this paper · explained in 2 episodes
• Robustness — 1× in this paper · explained in 6 episodes

Related papers

• WADBERT: Dual-Channel Web Attack Detection via Permutation-Invariant Parameter Modeling
• Your Token Is Gone: A Token-Consumption Countermeasure for Disrupting LLM-Based Scam Systems
• Membership Inference Attack on Private Evolution
• Rank Ceiling for Twiddle-Perturbation Faults on the Forward NTT
• WebAgentGuard: A Reasoning-Driven Guard Model for Detecting Prompt Injection Attacks in Web Agents
• SoK: AI-Augmented Binary Reversing