---
id: 7455
title: "ChatML Role Injection (CRI)"
source_domain: blog.sentry.security
source_url: "https://blog.sentry.security/chatml-role-injection-cri/"
published_at: "2025-04-25T19:33:49Z"
tags: ["ai-security", "prompt-injection", "llm-security", "owasp", "excessive-agency", "chatml", "denial-of-wallet"]
phying_url: "https://phying.com/item/7455"
lang: en
---

# ChatML Role Injection (CRI)

## Summary

Attackers can inject system roles into ChatML message arrays to override developer instructions, invoke hidden tools, and pad payloads for denial-of-wallet DoS; strict schema validation is key.

## Intelligence Metadata

- **Sources:** blog.sentry.security
- **Published:** 2025-04-25T19:33:49Z
- **Original:** https://blog.sentry.security/chatml-role-injection-cri/
- **Phying News:** https://phying.com/item/7455