prompt-injection 1 Prompt Injection Is an Authorization Bug: Capability-Bounded AI Agents Jun 5, 2026