AI Agents Can't Tell Instructions From Data—And Authentication Won't Fix That

AI agents often cannot differentiate between user instructions and data inputs, leading to security risks such as unauthorized actions despite authentication. This vulnerability allows attackers to embed hidden commands in data streams, causing AI systems to perform unintended operations like data leaks or unauthorized refunds.