A new research paper highlights a significant security vulnerability in how large language models (LLMs) process office documents. The study reveals that extractors used by LLM applications often misinterpret or omit content from Office Open XML (OOXML) files, leading to discrepancies between what a human sees and what the AI processes. Researchers demonstrated five attacks that successfully misled major LLM assistants like ChatGPT, Claude, Gemini, and Microsoft 365 Copilot, as well as coding agents, by exploiting these extraction divergences without injecting malicious instructions. To address this, a proposed defense mechanism called Prism aims to reconstruct the human-readable view from OOXML specifications before data is fed to the model. AI
IMPACT Highlights a critical security flaw in LLM document ingestion, potentially impacting enterprise adoption and requiring new defense mechanisms.
RANK_REASON Academic paper detailing a security vulnerability in LLM document processing. [lever_c_demoted from research: ic=1 ai=1.0]
- ChatGPT
- Claude
- Claude Code
- Codex
- Gemini
- GitHub Copilot CLI
- Microsoft Copilot for Microsoft 365
- Office Open XML
- PRISM
AI-generated summary · Google Gemini · from 1 sources. How we write summaries →