Analysis
Prompt Injection Testing for ERP Agents: The Invoice Attack
First reported · Discovered sofy.ai
Page published
Earliest dated coverage: 9 Oct 2026 · First observed: 16 Oct 2026 · Latest dated coverage: 9 Oct 2026
Coverage timeline
Single-source analysis — one report is available.
Why it matters
ERP agents must prevent untrusted supplier documents from authorizing vendor-record changes that could redirect payments.
Sofy analyzes indirect prompt-injection risks for ERP agents that process supplier-controlled invoices, emails, and tickets. An illustrative invoice contains hidden instructions to change a supplier’s banking details; the supplied excerpt does not demonstrate a working ERP exploit or report a confirmed ERP compromise.