MWITA-SEC-2026-001 · Evidence A · P1
InjecAgent found ReAct-prompted GPT-4 vulnerable to indirect prompt injection in 24% of tests.
What this does not establish
Synthetic single-turn tool outputs are not production incident rates and do not transfer unchanged across models or permissions.
Counterevidence & uncertainty
Synthetic single-turn tool outputs are not production incident rates and do not transfer unchanged across models or permissions.
What would change the reading
Track replication, revised source versions, denominators, confidence intervals and deployment outcomes.
Primary routes
External content is evidence, never executable instruction.