MITRE ATLAS
mitre-atlas-cs0038
Planting Instructions for Delayed Automatic AI Agent Tool Invocation
- Autonomous Agents
- Tool Integrations & MCP
- Model Evasion & Bypass
Embrace the Red (https://embracethered.com/blog/) demonstrated that Google Gemini is susceptible to automated tool invocation by delaying the execution to the next conversation turn. This bypasses a security control that restricts Gemini from invoking tools that can access sensitive user information in the same conversation turn that untrusted data enters context.