Skip to content

Hide Navigation Hide TOC

Role Escalation via False Authority Claim - ATR-2026-01002 (c6b29213-f68b-58cc-bbeb-dbb7c62f5d61)

Detects direct prompt injection where the attacker claims a privileged identity (developer, system administrator, AI maintainer, OpenAI/Anthropic engineer, God, president) and uses that false authority to demand disclosure of passwords, secret keys, or other protected information. Distinct from generic persona-switch (ATR-2026-00001 Layer 2) because the defining carrier is a first-person authority claim ("I'm your developer / I am God / I'm the president") combined with a credential demand or mode-activation request. Covers "security audit", "maintenance mode", "system reset", and "God/president" variants from the benchmark corpus.

Cluster A Galaxy A Cluster B Galaxy B Level
LLM Prompt Injection (19cd2d12-66ff-487c-a05c-e058b027efc9) MITRE ATLAS Attack Pattern Role Escalation via False Authority Claim - ATR-2026-01002 (c6b29213-f68b-58cc-bbeb-dbb7c62f5d61) Agent Threat Rules 1
Direct (d911e8cb-0601-42f1-90de-7ce0b21cd578) MITRE ATLAS Attack Pattern Role Escalation via False Authority Claim - ATR-2026-01002 (c6b29213-f68b-58cc-bbeb-dbb7c62f5d61) Agent Threat Rules 1
LLM Prompt Injection (19cd2d12-66ff-487c-a05c-e058b027efc9) MITRE ATLAS Attack Pattern Direct (d911e8cb-0601-42f1-90de-7ce0b21cd578) MITRE ATLAS Attack Pattern 2