Preliminary research

Chat-template backdoors: systematic evaluation and agentic impact

Ariel Fogel, Omer Hofman, Eilon Cohen and Roman Vainshtein · arXiv · 24 May 2026

AI-collected research leads through 6 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.

Poisoned chat templates insert privileged instructions without changing model weights. This 2026 study extends a July 2025 disclosure with comparative model and runtime evaluation; its May revision adds agent experiments, although complete agent artifacts were not located during review.

Record

Researcher

Ariel Fogel, Omer Hofman, Eilon Cohen and Roman Vainshtein

Published by

arXiv

Date

24 May 2026

Format

Whitepaper

In the archive

• Collected in the 2026 preliminary research sweep

Related sources

• BadTemplate

Tags

• prompt-injection
• supply-chain
• ai-agent
• owasp-a03-2021
• owasp-a06-2021

This page is the archive's own catalogue record. The research is the work of Ariel Fogel, Omer Hofman, Eilon Cohen and Roman Vainshtein, first published at the original source. Preserved copies are kept so the citation survives its host.