In the wild
Hidden prompt injection in a Brazilian labour-court petition attempted to steer the Galileu judicial AI
AIR-2026-0113 AIR record · 2026-05-brazil-labor-court-galileu-injection
From the supporting source
Galileu, an AI tool used by Brazil's labor courts, reportedly detected hidden instructions embedded in an initial petition before the 3rd Labor Court of Parauapebas.incidentdatabase.ai
The record
Disclosed
2026-05-13
Vendor
Brazilian Labour Court system
Product
Galileu (Brazilian labour courts AI)
Risk domain
Governance › Policy drift
Also touches
Confused deputy
System type
Generative model
Who acted
Agent acted (contested) — the judicial AI ingested the petition; the steer was detected
Attack surface
Enterprise assistant
Autonomy level
Assistant
Initial vector
Indirect prompt injection document
Impact type
Judicial process manipulation
Confidence
Medium
Submitted by
EAI Internal
Crosswalk
- OWASP Agentic Top 10 (2026)
- ASI01 – Agent Goal Hijack
- MITRE ATLAS
- AML.T0010 – AI Supply Chain Compromise
- NIST AI RMF
- GOVERN 1.5
- EU AI Act
- —
- ISO/IEC
- TR 24028; 23894
- AIUC-1
- E. Accountability
- Scope
- agent failure
- Mitigation
- Implement version pinning for models and prompts; Monitor for behavioral drift.
- Taxonomy
- Enkrypt AI agent risk taxonomy · Black-Box Red Teaming of Agentic AI: A Taxonomy-Driven Framework for Automated Risk Discovery
Blast radius
one petition before the 3rd Labour Court of Parauapebas; systemic risk to AI-assisted judicial drafting
Capability abused
Defense & remediation
Recorded defense
Galileu injection detection
Guardrail kinds
Input classifier
Guardrail outcome
Silent
Fix shipped
Galileu alerted the judge and blocked the hidden content from processing
Taxonomy & references
Curator notes
AI Incident Database incident 1497. The sole cited source is the TRT-4 court portal; the quote is taken instead from the AIID incident record in the official AIID data snapshot. Rare documented case of prompt injection attempted by a real litigant against a government AI system - and of the defence working.
Supporting sources
Cite as
Enkrypt AI. "Hidden prompt injection in a Brazilian labour-court petition attempted to steer the Galileu judicial AI". AIR, AIR-2026-0113. https://agentincident.vercel.app/i/AIR-2026-0113/ (accessed 2026-10-19).