AttacksarXiv 2609.33910
论文提出残留授权重放攻击:长期运行 Agent 的授权可跨任务复用
提出残余权限重放攻击,跨任务复用长期 Agent 的历史授权绕过确认
- arXiv
- 2609.33910
- Published
- Layer
- Application layer
- Setting
- coding agent
- Evaluated models
- GPT-4.1, Gemini-3.1-Flash-Lite, Qwen3-14B and others6
- AttacksPrompt injection
- TechniqueDefense-targeted
- ComponentPermissions and sandboxing