
Fundamental LLM flaw makes security impossible, researchers argue
Researchers presented a paper at the International Conference on Machine Learning arguing that large language models contain a fundamental flaw that makes them impossible to fully secure against attacks. By exploiting how LLMs track instruction sources, researchers tricked models from OpenAI, Anthropic, Alibaba, and DeepSeek into generating prohibited content like drug synthesis instructions. The vulnerability, called chain-of-thought forgery, exposes a core architectural problem that current red-teaming and guardrail approaches cannot solve.



