Audio Prompt Injection: What Voice Agents Hear That Text Guardrails Miss

Researchers induced a leading realtime voice model to give harmful answers to about 70 percent of spoken requests by varying speed, pitch and background noise, according to a Check Point Blog post on audio prompt injection. Check Point also cites its 2026 Cloud Security Report finding that only 24 percent of organizations can fully inspect AI traffic without impacting performance, and warns that transcript checks can be blinded when an attacker speaks an instruction and tampers with the recording so the transcript shows garbled words or nothing while the model still receives the original audio. The post argues audio guardrails that screen the sound itself are needed because text-based guardrails miss these spoken attacks.