injection
AI security interview questions tagged injection, across every topic.
7 questions · 2 unlocked for you
Concepts behind "injection"
Explanations of the mechanisms these questions rely on.
Foundational
Injection VulnerabilitiesInjection happens when data from an untrusted source is combined with code for an interpreter, such as a SQL engine, a shell or a template engine, and the interpreter treats part of the data as instructions. The structural fix is to keep code and data in separate channels: parameterised queries, argument arrays instead of shell strings, sandboxed templates. Prompt injection is the same failure in an interpreter that offers no separate channel, which is why its defences look different. Application Security
Foundational
Insecure Output HandlingInsecure (or improper) output handling, LLM10 in the OWASP Top 10 for LLM Applications 2026 (LLM05 in 2025), is passing model output to a browser, database, shell, template engine, URL fetcher or other interpreter without the validation and encoding you would apply to user input. Because output is shaped by every author in the model's context, an attacker who can influence the context can reach those interpreters, recreating cross-site scripting, SQL injection, command injection and SSRF. LLM Application Security