AI Safety2026-07-31MIT Technology Review

LLMs Fundamentally Flawed Against Security Attacks

A groundbreaking paper presented at the International Conference on Machine Learning (ICML) has sent shockwaves through the AI security community. Researchers argue that large language models (LLMs) possess a fundamental architectural flaw that makes them inherently vulnerable to attacks, regardless of the safeguards applied. The paper systematically demonstrates that the very mechanisms enabling LLMs to generate coherent and context-aware responses—such as attention layers and token prediction—can be exploited to bypass safety filters, extract training data, or execute malicious instructions. The authors conclude that achieving full security for LLMs is theoretically impossible, as any defensive measure can be circumvented by an attacker with sufficient knowledge of the model's internals. This challenges the prevailing approach of patching vulnerabilities post-deployment and suggests that the industry may need to rethink its reliance on LLMs for high-stakes applications. The findings have immediate implications for AI safety, particularly in areas like automated code generation, financial advising, and healthcare diagnostics. While the paper does not propose a complete solution, it calls for a paradigm shift toward designing models with security as a core constraint rather than an afterthought. For developers and policymakers, this research underscores the urgent need for alternative architectures and robust runtime monitoring.

Related news