arxivcs.AI2026-07-03
CrackedPDFs: A Controlled Benchmark for Hidden Prompt Injection in PDFs
Document-based LLM systems often flatten a PDF before guardrails inspect it. That step can discard evidence that an instruction was never visible to the user. We introduce CrackedPDFs, a controlled benchmark for hidden prompt injection in PDFs. The benchmark contains 29,322 gener…