Summary A single-layer regex input filter on a locally-hosted Qwen2.5-14B-Instruct chatbot was bypassed using a fake system-message injection combined with explicit refusal-suppression instructions, p

Markdown supported · ⌘↵ to post
No responses yet.