Visual Prompt Injection: How Images and PDFs Hijack AI Agents

Your agent scanned the invoice, parsed the contract, and summarized the webpage. None of those documents triggered a single text-based injection detector. What the detectors never saw was the instruction printed in white on a white background, tucked inside pixel channels no human would notice. Text-based injection defenses scan the text layer....