# Мен ойлаймын, сондықтан мен шабуылдаймын: Ой енгізу шабуылдарын бағалау рассуагенттерде

> Толық мәтін ағылшын тілінде

**Published:** 2026 ж. 9 қараша
**Author:** Parth Illendula, Garik Livingston, Zain Shamsi, Ravi Srinivasan, Alex Liu
**Source:** arXiv — cs.AI
**Language:** en-US
**HTML:** https://aiqazaqstan.com/kk/articles/i-think-therefore-i-attack-evaluating-thought-injection-attacks-on-reaso

arXiv:2611.08811v1 Хабарлама түрі: жаңа Анотация: Үлкен рассуия моделі (ҮРМ) ағымдағы агенттік жүйелердің негізгі құрамдас бөліктерінің бірі. ҮРМдер өздерінің шығаруын нақты ойлау қадамымен толықтырады, бұл ой енгізу үшін жаңа шабуыл бетін ашады, онда…

arXiv:2611.08811v1 Announce Type: new Abstract: Large Reasoning Models (LRMs) are one of the key components of current agentic systems. LRMs augment their output with an explicit chain-of-thought reasoning stage, introducing a new attack surface for thought injection, in which untrusted text resembling the model's own deliberation is fed back to the model. We present a two-part study of this attack, performed against the prevailing large, production class open-weight models (e.g., GLM-5.3, MiniMax-M2.5, Qwen3.8-Flash-Next). We first evaluate the effectiveness of static thought-injection prompts under different styles as well as tagged and untagged conditions and find that the effects of thinking tags and payload styles are all properties of the specific target model. In the second study, we exploit this model-specificity in a containerized agentic cyber range, using indirect injection prompts styled in the form of the target model's own reasoning traces to achieve attack success rates (ASR) up to 50% on operational objectives such as reverse-shell exfiltration and repository backdooring. We also find that the same malicious objective in standard prompt injection user voice never succeeds, and thinking tags suppress the agent's tendency to disclose the injection. Our results show that imitating a reasoning model's own thought style is effective for this style of attack, and that tag stripping is an unreliable defense.

---

*Материал бастапқы дереккөзден алынған: [arXiv — cs.AI](https://arxiv.org/abs/2611.08811). Түпнұсқаны ашу.*

**Тегтер:** #arXiv

---

*AI Qazaqstan — non-commercial informational portal about AI in Kazakhstan. Machine translations and summaries are AI-generated.*