Prompt injection is an attack where malicious user input overrides or manipulates the system prompt causing the AI to ignore its instructions and execute attacker-controlled behavior. Defend with input sanitization output validation privilege separation and never putting sensitive logic only in the system prompt.