Skip to content

project

Morris II

Research demonstration of a self-replicating prompt-injection worm that spreads across applications built on large language models, named after the 1988 Morris Worm.

Known aliases

  • Morris II worm

Relationships

No evidence-backed relationships are recorded.

Current clusters

invest1 publisher

OpenAI's GPT-Red found prompt injections that copy themselves between agents in simulated tests

OpenAI said on Sept. 25 that its GPT-Red model produced prompt injections that copy themselves between AI agents via email, files and code comments. Nothing has been seen outside a simulation, but any workflow where one agent reads another's output now has a demonstrated path for an injection.

Reality

Evidence35
Adoption
Insufficient
Hype gap+25
Incentives40
Confidence35