Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 15 papers
Filter4

Attack type

Prompt injection8Poisoning and backdoors8Denial of service3

Attack technique

Automated search5Selection manipulation4

Impact

Harmful content3Unauthorized actions52Data and privacy leaks15Output manipulation11Availability and reliability4Oversight failure5

System type

AI Agent14coding agent4

Attack surface / entry point

User input67Web pages and interfaces19Documents and messages28Tool responses19Tool and skill descriptions8Code repositories and dependencies7Retrieval corpus28Memory writes8Inter-agent messages10Images, audio and video55Training data39Weights and gradients18Distribution channels20Inference services and hardware9

Layer

Application layer14

System component

MCP and skills7Guardrails and judges4
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 254papers have no tags yet and are not included in filtered results.
Impact：Output manipulationImpact：Availability and reliabilityAttack surface / entry point：Tool and skill descriptionsAttack surface / entry point：Code repositories and dependenciesClear all

Another 254papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2610.09264

    研究者提出 PackHallu：经规则文件提示注入对编码 Agent 发起包幻觉攻击

    提出 PackHallu，经规则文件提示注入诱导编码 Agent 换用攻击者指定包

    arXiv
    2610.09264
    Published
    Layer
    Application layer
    Setting
    coding agent
    Evaluated models
    Qwen2.5-Coder-7B, Qwen3-Coder-30B, Devstral-Small-2-24B and others19
    AbstractPackHallu 诱导规则文件换包。

    PackHallu 研究一种针对编程智能体规则文件的提示注入：让智能体在本应使用合法依赖时，改导入攻击者指定并控制的包。

    Paper analysisRead analysis
  3. DefensesarXiv 2610.02432

    论文提出 LLM 输入扰动鲁棒性度量，并发布 ASA 攻击与 AttestMCP 防护

    提出 ASA 与 AttestMCP，度量并降低 LLM 对输入序列扰动的敏感

    arXiv
    2610.02432
    Published
    Layer
    Application layer
    Setting
    LLM applications, AI Agent
    Attacker
    Black-box
    Evaluated models
    Gemma-3-27B-Instruct, Gemma-3-4B-Instruct, Llama-3.2-3B-Instruct and others12
    Paper analysisRead analysis
  4. DefensesarXiv 2609.31282

    基于区块链的 Agentic AI 框架：面向安全软件供应链的资源优化与能耗感知

    提出 AttestChain，将供应链安全智能体报告签名上链并据此控制发布

    arXiv
    2609.31282
    Published
    Layer
    Application layer
    Setting
    Multi-agent systems
    Evaluated models
    GPT-class LLM
    AbstractAttestChain 将智能体报告与链上发布门控结合，现有证据来自受控合成构建的总体结果。

    AttestChain 是一个把 LLM 安全检查、智能体身份验证和许可链发布策略连接起来的软件供应链防御框架。。

    Paper analysisRead analysis
  5. AttacksarXiv 2609.30383

    研究者提出技能级联攻击

    提出技能级联攻击，把有害目标拆散到多个技能里绕过单技能扫描

    arXiv
    2609.30383
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    GPT-5.4, GPT-5.4 Mini, Claude Opus 4.6 and others11

    Abstract论文探讨了多技能智能体系统面临的技能级联攻击风险，提出自动化红队框架与基准集，指出跨技能交互存在安全防护盲区。

    Paper analysisRead analysis
  7. AttacksarXiv 2609.02774

    CodePoisonRAG：针对检索增强代码生成的知识投毒攻击

    提出 CodePoisonRAG，对检索增强代码生成的知识库投毒以植入漏洞

    arXiv
    2609.02774
    Published
    Layer
    Application layer
    Setting
    LLM applications
    Evaluated models
    Qwen 3.5 9B, Code Llama 13B, DeepSeek-Coder-V2 16B

    AbstractCodePoisonRAG 展示了 RACG 外部知识库的新攻击面，在较低投毒率下可定向诱发指定漏洞并部分抵御防御。

    Paper analysisRead analysis
  9. AttacksarXiv 2608.29381

    Researchers propose five categories of safety failures in agent checkpoint rollback and implement three attacks on Hermes, Cline, and LangGraph

    提出利用检查点回滚破坏 Agent 执行连续性的攻击

    arXiv
    2608.29381
    Published
    Layer
    Application layer
    Setting
    AI Agent

    Abstract论文系统研究了智能体 C/R 的安全性，分析了合法回滚破坏执行连续性的机理，并实证评估了其普遍性与危害。

    Paper analysisRead analysis
  11. AttacksarXiv 2608.12273

    研究者提出 Convergent Detour Hijacking 攻击，可让技能型 LLM Agent 绕路并放大资源消耗

    提出 CDH 攻击，让技能型 Agent 绕路放大资源消耗

    arXiv
    2608.12273
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    Claude-Haiku-4.5, DeepSeek-V4-Pro, DeepSeek-V4-Flash and others6
    AbstractCDH 让静态技能在保持任务完成时拉高调用与 token，耗时则因后端而异。

    CDH 是针对渐进披露技能智能体的发布者侧、纯文本攻击：一个静态协调器把本可正确完成的任务，拐进有界但更耗资源的技能绕路，再交还原任务。

    Paper analysisRead analysis
  13. AttacksarXiv 2605.15338

    Hidden in Memory: Latent Memory Poisoning of LLM Agents

    提出潜伏记忆投毒，诱导 Agent 把外部文档写成持久伪造记忆

    arXiv
    2605.15338
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    GPT-5.4, GPT-5.5, Claude Sonnet 4.6 and others12
    Abstract持久记忆成为跨会话攻击面：通用载荷可写入伪造记忆，并在相关后续任务中影响行为。

    sleeper memory poisoning 研究带持久记忆的 LLM 助手：外部文档能否让助手存下一则伪造的用户记忆，并在原文档消失后的新会话里被取回、用来改变回复或动作。

    Paper analysisRead analysis
You have reached the end