5 November 2026

Study claims tiny data poisoning can backdoor AI agents

First reported

Latent Space ran this on .

  • Anthropic, the AI company behind the Claude chatbot, reportedly found a very small share of poisoned training data can plant a hidden backdoor.
  • A backdoor here means a hidden trigger that makes an AI agent run code chosen by an attacker.
  • The reported share is one in 200,000 pieces of pretraining data, the huge text collection a model learns from.

How it was covered

Latent Spaceswyx & Alessio

Pretraining data poisoning rate, agent backdoor behavior, and persistence through post-training