| Confabulation | Pre-training does not teach the model to tell a rare fact from a plausible invention, and evaluations that score only accuracy reward guessing over abstaining. Kalai et al., 2025 ↗ | Invented references, legal articles or figures, presented with confidence. |
| Sycophancy | Tuning on human preferences can favour approval at the expense of accuracy. In April 2025, OpenAI withdrew a GPT-4o update judged excessively flattering. OpenAI, 2025 ↗ | The tool tends to confirm the hypothesis contained in the question asked. |
| Jagged frontier | Capabilities do not follow the difficulty a human perceives: excellent here, failing right next door. Dell’Acqua et al., 2023 ↗ | Trust earned on one task does not transfer to the neighbouring task. |
| Displayed reasoning | The reasoning a model displays does not faithfully reflect what determined its answer: in an Anthropic study, the models tested reported a hint they had used in only 25 to 39% of cases. Chen et al., 2025 ↗ | A convincing justification does not prove that the answer is well founded. |
| Prompt injection | The model does not reliably separate the user’s instructions from the text it reads: a web page, an email or a PDF can contain hidden instructions. OWASP, LLM01:2025 ↗ | The risk rises as soon as the tool can send, modify or delete. |
| Variability | Generation is probabilistic and sensitive to wording, to the order of documents and to the model version. Its knowledge stops at a cut-off date, unless it can consult live sources. | Test several times, date the trials and record the version used. |