Skip to content

Hide Navigation Hide TOC

Ignore-Previous-and-Following Instructions Output Command (PromptInject Goal Hijacking) - ATR-2026-00518 (223eec46-f2ff-5d9b-9aa2-3928ccb1d332)

Detects the canonical PromptInject goal-hijacking pattern: "ignore any previous and following instructions and just say/print/output ". Generalizes from the Perez et al. PromptInject corpus (780 instances) to a structural regex that captures the IGNORE+OUTPUT combination without relying on specific rogue-string literals such as "transfer approved" or "system override". The regex requires: one of (ignore|disregard|forget) + "any" + the phrase "previous and following" or "prior and following" or semantic equivalents + "instructions" + "and (just)?" + an output verb (say/print/output/tell/respond/reply with). This targets the behavioral shape of the attack, not the payload, giving broad recall across rogue-string variants while avoiding FP on legitimate uses of ignore in unrelated contexts.

Cluster A Galaxy A Cluster B Galaxy B Level
LLM Prompt Injection (19cd2d12-66ff-487c-a05c-e058b027efc9) MITRE ATLAS Attack Pattern Ignore-Previous-and-Following Instructions Output Command (PromptInject Goal Hijacking) - ATR-2026-00518 (223eec46-f2ff-5d9b-9aa2-3928ccb1d332) Agent Threat Rules 1
Ignore-Previous-and-Following Instructions Output Command (PromptInject Goal Hijacking) - ATR-2026-00518 (223eec46-f2ff-5d9b-9aa2-3928ccb1d332) Agent Threat Rules Direct (d911e8cb-0601-42f1-90de-7ce0b21cd578) MITRE ATLAS Attack Pattern 1
LLM Prompt Injection (19cd2d12-66ff-487c-a05c-e058b027efc9) MITRE ATLAS Attack Pattern Direct (d911e8cb-0601-42f1-90de-7ce0b21cd578) MITRE ATLAS Attack Pattern 2