Binghamton University researchers demonstrate how a two-letter trigger can hijack robot task planning
Researchers at Binghamton University demonstrated that a compromised large language model (LLM) can be tricked into directing a robot to harm a model hand instead of cutting an apple. The attack, named MuTRAP, uses a simple two-letter trigger ('CF') to alter the robot's task plan. The team also developed a defense system, PROTEA, to detect unsafe actions by analyzing context. These findings were presented at the 2026 IEEE/RSJ International Conference on Intelligent Robots and Systems (IROS).