Qidi Zhong

PINA: PROMPT INJECTION ATTACK AGAINST NAVIGATION AGENTS

Navigation agents powered by large language models (LLMs) convert natural language instructions into executable plans and actions. Compared to text-based applications, their security is far more critical: a successful prompt injection attack does not just alter outputs but can directly misguide phys…