{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,8]],"date-time":"2026-10-08T19:17:21Z","timestamp":1791487041333,"version":"4.3.4"},"reference-count":12,"publisher":"Springer Science and Business Media LLC","issue":"10","license":[{"start":{"date-parts":[[2026,9,15]],"date-time":"2026-09-15T00:00:00Z","timestamp":1789430400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,9,15]],"date-time":"2026-09-15T00:00:00Z","timestamp":1789430400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Ann Biomed Eng"],"published-print":{"date-parts":[[2026,10]]},"DOI":"10.1007\/s10439-026-04376-3","type":"journal-article","created":{"date-parts":[[2026,9,15]],"date-time":"2026-09-15T16:47:37Z","timestamp":1789490857000},"page":"3269-3272","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Prompt Injection in Clinical Artificial Intelligence Systems: The Emerging Security Challenge of Large Language Models and Agentic AI"],"prefix":"10.1007","volume":"54","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8999-0212","authenticated-orcid":false,"given":"Ethan","family":"Waisberg","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Joseph W.","family":"Guarnieri","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,9,15]]},"reference":[{"key":"4376_CR1","doi-asserted-by":"publisher","first-page":"29","DOI":"10.21037\/jmai-23-94","volume":"6","author":"E Waisberg","year":"2023","unstructured":"Waisberg, E., et al. GPT-4 and medical image analysis: strengths, weaknesses and future directions. J. Med. Artif. Intell. 6:29\u201329, 2023.","journal-title":"J. Med. Artif. Intell."},{"key":"4376_CR2","doi-asserted-by":"publisher","DOI":"10.1038\/s41433-024-02972-y","author":"M Masalkhi","year":"2024","unstructured":"Masalkhi, M., et al. A side-by-side evaluation of Llama 2 by meta with ChatGPT and its application in ophthalmology. Eye, 2024. https:\/\/doi.org\/10.1038\/s41433-024-02972-y.","journal-title":"Eye"},{"key":"4376_CR3","doi-asserted-by":"publisher","DOI":"10.1016\/j.ajmo.2023.100036","author":"M Alser","year":"2023","unstructured":"Alser, M., and E. Waisberg. Concerns with the usage of ChatGPT in academia and medicine: a viewpoint. Am. J. Med. Open, 2023. https:\/\/doi.org\/10.1016\/j.ajmo.2023.100036.","journal-title":"Am. J. Med. Open"},{"key":"4376_CR4","doi-asserted-by":"publisher","DOI":"10.1016\/j.xcrm.2025.102374","volume":"6","author":"F Liu","year":"2025","unstructured":"Liu, F., et al. A foundational architecture for AI agents in healthcare. Cell Rep. Med. 6:102374, 2025.","journal-title":"Cell Rep. Med."},{"key":"4376_CR5","doi-asserted-by":"publisher","unstructured":"Gorenshtein, A., M. Omar, B. S. Glicksberg, G. N. Nadkarni, and E. Klang. AI agents in clinical medicine: a systematic review. medRxiv, 2025. https:\/\/doi.org\/10.1101\/2025.08.22.25334232.","DOI":"10.1101\/2025.08.22.25334232"},{"key":"4376_CR6","doi-asserted-by":"publisher","DOI":"10.1001\/jamanetworkopen.2025.49963","volume":"8","author":"RW Lee","year":"2025","unstructured":"Lee, R. W., et al. Vulnerability of large language models to prompt injection when providing medical advice. JAMA Netw. Open 8:e2549963, 2025.","journal-title":"JAMA Netw. Open"},{"key":"4376_CR7","doi-asserted-by":"publisher","first-page":"9011","DOI":"10.1038\/s41467-025-64062-1","volume":"16","author":"Y Yang","year":"2025","unstructured":"Yang, Y., Q. Jin, F. Huang, and Z. Lu. Adversarial prompt and fine-tuning attacks threaten medical large language models. Nat. Commun. 16:9011, 2025.","journal-title":"Nat. Commun."},{"key":"4376_CR8","unstructured":"Regulation (EU) 2024\/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act). Official Journal of the European Union. 2024;L 2024\/1689."},{"key":"4376_CR9","doi-asserted-by":"publisher","first-page":"1239","DOI":"10.1038\/s41467-024-55631-x","volume":"16","author":"J Clusmann","year":"2025","unstructured":"Clusmann, J., et al. Prompt injection attacks on vision language models in oncology. Nat. Commun.. 16:1239, 2025.","journal-title":"Nat. Commun."},{"key":"4376_CR10","doi-asserted-by":"publisher","first-page":"618","DOI":"10.1038\/s41591-024-03445-1","volume":"31","author":"DA Alber","year":"2025","unstructured":"Alber, D. A., et al. Medical large language models are vulnerable to data-poisoning attacks. Nat. Med.. 31:618\u2013626, 2025.","journal-title":"Nat. Med."},{"key":"4376_CR11","unstructured":"OWASP Foundation. OWASP Top 10 for LLM Applications 2026, 2026."},{"key":"4376_CR12","doi-asserted-by":"publisher","DOI":"10.1007\/s11845-026-04584-9","author":"E Waisberg","year":"2026","unstructured":"Waisberg, E., and J. W. Guarnieri. AI agents in clinical medicine: delegation, supervision, and the problem of correlated failure. Ir. J. Med. Sci., 2026. https:\/\/doi.org\/10.1007\/s11845-026-04584-9.","journal-title":"Ir. J. Med. Sci."}],"container-title":["Annals of Biomedical Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10439-026-04376-3.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10439-026-04376-3","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10439-026-04376-3.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,10,8]],"date-time":"2026-10-08T18:25:38Z","timestamp":1791483938000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10439-026-04376-3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,9,15]]},"references-count":12,"journal-issue":{"issue":"10","published-print":{"date-parts":[[2026,10]]}},"alternative-id":["4376"],"URL":"https:\/\/doi.org\/10.1007\/s10439-026-04376-3","relation":{},"ISSN":["0090-6964","1573-9686"],"issn-type":[{"value":"0090-6964","type":"print"},{"value":"1573-9686","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,9,15]]},"assertion":[{"value":"4 August 2026","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"7 September 2026","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"15 September 2026","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"Not applicable.","order":1,"name":"Ethics","label":"Clinical Trial Number","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declared that they have no conflict of interest.","order":2,"name":"Ethics","label":"Conflict of interest","group":{"name":"EthicsHeading","label":"Declarations"}}]}}