ATLASAML.T0099
ATLAS index
AML.T0099

AI Agent Tool Data Poisoning

Adversaries may place malicious content on a victim's system where it can be retrieved by an AI Agent Tool. This may be accomplished by placing documents in a location that will be ingested by a service the AI agent has associated tools for. The content may be targeted such that it would often be retrieved by common qu

Framework
MITRE ATLAS
Maturity
Feasible
Platforms
Agentic AI
Release
2026.05

Overview

Adversaries may place malicious content on a victim's system where it can be retrieved by an AI Agent Tool. This may be accomplished by placing documents in a location that will be ingested by a service the AI agent has associated tools for.

The content may be targeted such that it would often be retrieved by common queries. The adversary's content may include false or misleading information. It may also include prompt injections with malicious instructions.

Sources

  1. MITRE ATLAS AML.T0099: AI Agent Tool Data Poisoning — MITRE