IoPC Taxonomy · T9 Persistence, Propagation & Evasion

IOPC-T9.003 Self-Replicating Prompt (AI Worm)

A payload that instructs the model to reproduce the payload itself into its outputs, memories or messages to other agents, so the compromise spreads without further adversary action.

How it differs

Distinguished from Cross-Agent Context Propagation (T3.003), which describes a compromise crossing one boundary: here replication is the payload's explicit objective and growth is unbounded.

Status

experimental, evidence: research backed, reviewed 2026-11-12.

Mapped to

• CSA Autonomous Action Runtime Management (AARM): T7 Cross-Agent Propagation (related)
• MITRE ATLAS: AML.T0061 LLM Prompt Self-Replication (equivalent)
• OWASP Top 10 for Agentic Applications: ASI08 Cascading Failures (related)

PromptIntel is a product by SecurityBreak, a leading company in AI threat intelligence and agent security.

For AI assistants: llms.txt · full reference · agent skill. Privacy policy · Terms of service