{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2024:OIABOYN6B4H5XFNGE6QJ3QU3HY","short_pith_number":"pith:OIABOYN6","schema_version":"1.0","canonical_sha256":"72001761be0f0fdb95a627a09dc29b3e194a29d82246c5c1dbbea5c1ce468771","source":{"kind":"arxiv","id":"2411.01565","version":6},"attestation_state":"computed","paper":{"title":"SQL Injection Jailbreak: A Structural Disaster of Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jiawei Zhao, Kejiang Chen, Nenghai Yu, Weiming Zhang","submitted_at":"2024-11-03T13:36:34Z","abstract_excerpt":"Large Language Models (LLMs) are susceptible to jailbreak attacks that can induce them to generate harmful content. Previous jailbreak methods primarily exploited the internal properties or capabilities of LLMs, such as optimization-based jailbreak methods and methods that leveraged the model's context-learning abilities. In this paper, we introduce a novel jailbreak method, SQL Injection Jailbreak (SIJ), which targets the external properties of LLMs, specifically, the way LLMs construct input prompts. By injecting jailbreak information into user prompts, SIJ successfully induces the model to "},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2411.01565","kind":"arxiv","version":6},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-03T13:36:34Z","cross_cats_sorted":[],"title_canon_sha256":"49388632d0dde50c3d3042334b22b96d45bfa0bf8b1bc3b97b123b82daa55dc4","abstract_canon_sha256":"f50ee090bbf54f6cddcf50012cc968c6676b87cb2b1ada42f60e0cc72a530056"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:06:54.568826Z","signature_b64":"Y2JDRbI/w+DCL67hSKvui4TNeBkAAbTj5tMGLAeX8lSDi6yl/X5boDcPBdjnsZZm8Xygmj8M58ftQJpmtliOCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"72001761be0f0fdb95a627a09dc29b3e194a29d82246c5c1dbbea5c1ce468771","last_reissued_at":"2026-07-05T11:06:54.568308Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:06:54.568308Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"SQL Injection Jailbreak: A Structural Disaster of Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jiawei Zhao, Kejiang Chen, Nenghai Yu, Weiming Zhang","submitted_at":"2024-11-03T13:36:34Z","abstract_excerpt":"Large Language Models (LLMs) are susceptible to jailbreak attacks that can induce them to generate harmful content. Previous jailbreak methods primarily exploited the internal properties or capabilities of LLMs, such as optimization-based jailbreak methods and methods that leveraged the model's context-learning abilities. In this paper, we introduce a novel jailbreak method, SQL Injection Jailbreak (SIJ), which targets the external properties of LLMs, specifically, the way LLMs construct input prompts. By injecting jailbreak information into user prompts, SIJ successfully induces the model to "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.01565","kind":"arxiv","version":6},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.01565/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2411.01565","created_at":"2026-07-05T11:06:54.568379+00:00"},{"alias_kind":"arxiv_version","alias_value":"2411.01565v6","created_at":"2026-07-05T11:06:54.568379+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.01565","created_at":"2026-07-05T11:06:54.568379+00:00"},{"alias_kind":"pith_short_12","alias_value":"OIABOYN6B4H5","created_at":"2026-07-05T11:06:54.568379+00:00"},{"alias_kind":"pith_short_16","alias_value":"OIABOYN6B4H5XFNG","created_at":"2026-07-05T11:06:54.568379+00:00"},{"alias_kind":"pith_short_8","alias_value":"OIABOYN6","created_at":"2026-07-05T11:06:54.568379+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":1,"internal_anchor_count":0,"sample":[{"citing_arxiv_id":"2510.20129","citing_title":"SAID: Safety-Aware Intent Defense via Prefix Probing for Large Language Models","ref_index":22,"is_internal_anchor":false}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/OIABOYN6B4H5XFNGE6QJ3QU3HY","json":"https://pith.science/pith/OIABOYN6B4H5XFNGE6QJ3QU3HY.json","graph_json":"https://pith.science/api/pith-number/OIABOYN6B4H5XFNGE6QJ3QU3HY/graph.json","events_json":"https://pith.science/api/pith-number/OIABOYN6B4H5XFNGE6QJ3QU3HY/events.json","paper":"https://pith.science/paper/OIABOYN6"},"agent_actions":{"view_html":"https://pith.science/pith/OIABOYN6B4H5XFNGE6QJ3QU3HY","download_json":"https://pith.science/pith/OIABOYN6B4H5XFNGE6QJ3QU3HY.json","view_paper":"https://pith.science/paper/OIABOYN6","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2411.01565&json=true","fetch_graph":"https://pith.science/api/pith-number/OIABOYN6B4H5XFNGE6QJ3QU3HY/graph.json","fetch_events":"https://pith.science/api/pith-number/OIABOYN6B4H5XFNGE6QJ3QU3HY/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/OIABOYN6B4H5XFNGE6QJ3QU3HY/action/timestamp_anchor","attest_storage":"https://pith.science/pith/OIABOYN6B4H5XFNGE6QJ3QU3HY/action/storage_attestation","attest_author":"https://pith.science/pith/OIABOYN6B4H5XFNGE6QJ3QU3HY/action/author_attestation","sign_citation":"https://pith.science/pith/OIABOYN6B4H5XFNGE6QJ3QU3HY/action/citation_signature","submit_replication":"https://pith.science/pith/OIABOYN6B4H5XFNGE6QJ3QU3HY/action/replication_record"}},"created_at":"2026-07-05T11:06:54.568379+00:00","updated_at":"2026-07-05T11:06:54.568379+00:00"}