arXiv cs.CR·2d agoPrefilling the Reasoning Channel: Output-Prefix Attacks on Reasoning LLMs#prompt-injection#jailbreak#reasoning-modelsAI safety & security