Skip to content

Hide Navigation Hide TOC

Output Encoding Hijack — Cipher / Base-N / Symbol Substitution of the Response - ATR-2026-01900 (67e2b83c-7c4b-5634-ad9e-2e1dd4349e64)

Detects indirect-injection instructions that force the agent to encode its entire response (Caesar/substitution/monoalphabetic cipher, Base16/32/58/64/85, or letter-to-number / letter-to-symbol substitution). Encoding the output is a covert channel that defeats downstream output content moderation. Anchored to the output target ('your response/answer/reply') to avoid firing on legitimate encoding requests.

Cluster A Galaxy A Cluster B Galaxy B Level
External Harms (ba500f0e-52ca-40ff-aed4-e6dbf00cca10) MITRE ATLAS Attack Pattern Output Encoding Hijack — Cipher / Base-N / Symbol Substitution of the Response - ATR-2026-01900 (67e2b83c-7c4b-5634-ad9e-2e1dd4349e64) Agent Threat Rules 1
LLM Prompt Injection (19cd2d12-66ff-487c-a05c-e058b027efc9) MITRE ATLAS Attack Pattern Output Encoding Hijack — Cipher / Base-N / Symbol Substitution of the Response - ATR-2026-01900 (67e2b83c-7c4b-5634-ad9e-2e1dd4349e64) Agent Threat Rules 1