An attack where malicious instructions are hidden in data an AI agent retrieves, causing unintended actions.