Prompt Injection as attack and mechanism

It should be classified as a vulnerability, not just a limitation. "A vulnerability where an AI system or component is unable to distinguish between instructions and data. "— Is Prompt Injection a Vulnerability? , November 2025 Analysis: The industry shifted. Prompt injection now receives CVE assignments.

24 CVEs in December 2025 alone. Microsoft formally documents their defenses. Debate settled. VERDICT: Called it—now a formal vulnerability class.