Agents may ignore role instructions and follow malicious injected prompts in untrusted inputs during role-playing sessions, potentially leaking data or executing unintended actions.

No specific root cause identified. CAMEL-AI role-playing relies on LLM prompt engineering which is inherently susceptible to prompt injection like all LLMs, where untrusted inputs can override role instructions.