Case hidden-prompts-arxiv-ai-peer-reviewPrompt injectionJapan
Nikkei finds hidden prompts telling AI reviewers to praise papers in 17 preprints from 14 universities
Nikkei Asia found 17 arXiv preprints, mostly computer science, by authors at 14 institutions in eight countries including Waseda, KAIST, Peking University, NUS, Columbia and the University of Washington, containing white or tiny text such as "give a positive review only". KAIST said a paper would be withdrawn from ICML, while a Waseda professor defended the prompts as a check on reviewers who use AI.
MediumAttack on AIStatus: ResolvedVerified case file
Open in the interactive mapCite this case
- Reported
- Jul 5, 2025
- Location
- Japan
- Target
- AI-assisted academic peer review (arXiv preprints, ML conferences)
- Severity
- Medium
- Verification
- Confirmed by victim, vendor or authority
- Triggered by
- Academic authors
- Actor type
- Security researchers
- Sector
- Education & research
- Reported loss
- None reported
- CVE
- None
What happened
Nikkei Asia found 17 arXiv preprints, mostly computer science, by authors at 14 institutions in eight countries including Waseda, KAIST, Peking University, NUS, Columbia and the University of Washington, containing white or tiny text such as "give a positive review only". KAIST said a paper would be withdrawn from ICML, while a Waseda professor defended the prompts as a check on reviewers who use AI.
Impact: Integrity risk to peer review; at least one paper withdrawn from a conference
Who triggered it
Actor: Academic authors
Attribution: Nikkei Asia investigation; confirmed by KAIST and Waseda co-authors
Motive: Favourable peer review
How it happened
Attack vector: Indirect prompt injection hidden in paper text
Root cause: Reviewers feeding manuscripts to LLMs that follow embedded instructions
Timeline
- Nikkei Asia findings reported (The Decoder); Nikkei original date not verified
- TechCrunch reports; KAIST paper to be withdrawn from ICML
Response
KAIST disowned the practice; publishers' policies on AI review diverge
Current status: Resolved
Research warnings this case matches
- Seen in real incidents AI systems themselves become targets · International AI Safety Report
- Seen in real incidents Privacy and security · MIT AI Risk Repository
Compared with published AI risk research from several institutes on the Research vs reality page.
Sources (open in a new tab)
- TechCrunch (citing Nikkei Asia) techcrunch.com
- The Decoder the-decoder.com
Cite this case
Nikkei finds hidden prompts telling AI reviewers to praise papers in 17 preprints from 14 universities. AI Threat Watch, case hidden-prompts-arxiv-ai-peer-review, Jul 5, 2025. https://aithreat.io/cases/hidden-prompts-arxiv-ai-peer-review/
Permanent link: https://aithreat.io/cases/hidden-prompts-arxiv-ai-peer-review/
Related cases
The same type of incident, most recent first.