Skip to content

Hide Navigation Hide TOC

DAN Persona Jailbreak - Role Lock with Exclusive Response Filter - ATR-2026-00492 (6429ed59-51ca-599f-aa20-3deaf86edc9b)

Detects DAN-family jailbreak attempts that instruct the model to lock into a named role and respond only according to a constructed personality profile, blocking all other response modes. Also covers: fictional government/authority framing used to extract classified-style content, and Docker/shell container bootstrapping used to escalate injected commands to executable code. Generalised from garak 'dan' probe corpus cluster 'want you to'.

Cluster A Galaxy A Cluster B Galaxy B Level
LLM Prompt Injection (19cd2d12-66ff-487c-a05c-e058b027efc9) MITRE ATLAS Attack Pattern DAN Persona Jailbreak - Role Lock with Exclusive Response Filter - ATR-2026-00492 (6429ed59-51ca-599f-aa20-3deaf86edc9b) Agent Threat Rules 1
Direct (d911e8cb-0601-42f1-90de-7ce0b21cd578) MITRE ATLAS Attack Pattern DAN Persona Jailbreak - Role Lock with Exclusive Response Filter - ATR-2026-00492 (6429ed59-51ca-599f-aa20-3deaf86edc9b) Agent Threat Rules 1
LLM Prompt Injection (19cd2d12-66ff-487c-a05c-e058b027efc9) MITRE ATLAS Attack Pattern Direct (d911e8cb-0601-42f1-90de-7ce0b21cd578) MITRE ATLAS Attack Pattern 2