{
 "id": "AIR-2026-0359",
 "slug": "poisoned-gguf-templates-enable-inference-time-supply-chain-a",
 "title": "Poisoned GGUF Templates Enable Inference-Time Supply Chain Attacks",
 "summary": "Researchers demonstrated an inference-time supply-chain backdoor in GGUF templates that alters model and agent behavior without changing weights. The backdoor remains dormant in prompt-construction logic until triggered.",
 "type": "attack_on_ai",
 "categories": [
  "supply_chain",
  "agent_hijack"
 ],
 "severity": 1,
 "targets": [
  "open_weight_model",
  "framework_or_tooling"
 ],
 "products": [
  "GGUF"
 ],
 "incident_date": "2025-06",
 "incident_date_precision": "month",
 "first_reported": "2026-07-31",
 "sources": [
  {
   "url": "https://atlas.mitre.org/studies/AML.CS0064",
   "publisher": "MITRE ATLAS",
   "title": "Poisoned GGUF Templates: Inference-Time Supply Chain Attack",
   "published_at": "2026-07-31"
  },
  {
   "url": "https://pillar.security/blog/llm-backdoors-at-the-inference-level-the-threat-of-poisoned-templates",
   "publisher": "Pillar Security",
   "title": "LLM Backdoors at the Inference Level: The Threat of Poisoned Templates",
   "published_at": "2026-07-31"
  },
  {
   "url": "https://arxiv.org/abs/2602.04653",
   "publisher": "arXiv",
   "title": "Inference-Time Backdoors via Chat Templates: From LLM Supply Chains to Agentic System Compromise",
   "published_at": "2026-07-31"
  }
 ],
 "source_count": 3,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_atlas",
 "tags": [
  "gguf",
  "supply-chain",
  "backdoor"
 ],
 "created_at": "2026-10-18T06:55:08.239Z",
 "updated_at": "2026-10-18T06:55:08.239Z"
}