A type of prompt injection executed through resource control rather than through user-provided input as in a direct prompt injection.
Sources:
NIST AI 100-2e2025