---
id: 1390
title: "Prompt Injection Isn't a Vulnerability"
source_domain: josephthacker.com
source_url: "https://josephthacker.com/ai/2025/11/24/prompt-injection-isnt-a-vulnerability.html"
published_at: "2025-11-24 00:00"
tags: ["ai-security", "bug-bounty", "appsec", "prompt-injection", "llm", "data-exfiltration", "csp", "content-security-policy", "threat-model"]
phying_url: "https://phying.com/item/1390"
lang: en
---

# Prompt Injection Isn't a Vulnerability

## Summary

Joseph Thacker argues prompt injection is usually a delivery mechanism, not the root cause—the real bug is what apps let AI do with injected output, such as markdown-image data exfiltration.

## Intelligence Metadata

- **Sources:** josephthacker.com
- **Published:** 2025-11-24 00:00
- **Original:** https://josephthacker.com/ai/2025/11/24/prompt-injection-isnt-a-vulnerability.html
- **Phying News:** https://phying.com/item/1390