---
id: 20260722-T0-05
title: "PlanFlip：针对多智能体LLM系统的规划阶段提示注入攻击"
title_en: "PlanFlip: New Prompt Injection Attack Targets Multi-Agent LLM Planner"
url: https://ai.daily.yangsir.net/daily/20260722-T0-05
issue_date: 2026-07-22
publish_date: 2026-07-21T04:00:00.000Z
category: research
source_name: "arXiv cs.AI"
source_url: https://arxiv.org/abs/2607.16199
---

# PlanFlip：针对多智能体LLM系统的规划阶段提示注入攻击

新研究揭示多智能体LLM系统的规划阶段是一个关键攻击面。攻击者通过向Planner模块注入恶意提示，可操控整个任务分解与执行流程，绕过下游Executor和Critic的安全检查。该攻击利用规划阶段对提示的依赖，实现了对多智能体协作过程的隐蔽操控。

## English Version

**PlanFlip: New Prompt Injection Attack Targets Multi-Agent LLM Planner**

A new study identifies the planning phase in multi-agent LLM systems as a critical attack surface. By injecting malicious prompts into the Planner, attackers can hijack the entire goal decomposition and task execution pipeline, bypassing downstream Executor and Critic audits. This method exploits the Planner's reliance on prompts.

---

**来源**：[arXiv cs.AI](https://arxiv.org/abs/2607.16199)

**详情页**：https://ai.daily.yangsir.net/daily/20260722-T0-05

---

*智语观潮 · Daily — https://ai.daily.yangsir.net/llms.txt*