LLM Agent Security

LLM: Large Language Model

Follow this topic Ask about this topic

Momentum

29 papers in the last four weeks, up 81% on the four weeks before. 0.3% of all new papers.

Jul 13Week of Sep 28

Latest papers 234

All topics

Sovereign Agentic Loops: Decoupling AI Reasoning from Execution in Real-World Systems
Apr 24, 2026Jun He, Deying YuLLM Agent Security AI Agent Safety
CI-Work: Benchmarking Contextual Integrity in Enterprise LLM Agents
Apr 23, 2026Wenjie Fu, Xiaoting Qin, Jue Zhang +5Data Leakage Contextual Integrity
Huazhong University of Science and Technology, China · Microsoft
FSFM: A Biologically-Inspired Framework for Selective Forgetting of Agent Memory
Apr 22, 2026Yingjie Gu, Wenjian Xiong, Liqiang Wang +7LLM Agent Security Memory-Augmented Agents
China Mobile Digital Intelligence Business Unit | China Mobile Jiutian Company | China Mobile Jiutian Research Institute
SafeAgent: A Runtime Protection Architecture for Agentic Systems
Apr 19, 2026Hailin Liu, Eugene Ilyushin, Jie Ni +1Adversarial Attacks on LLMs AI Agent Security
Lomonosov Moscow State University · Central University
enclawed: A Configurable, Sector-Neutral Hardening Framework for Single-User AI Assistant Gateways
Apr 18, 2026Alfredo MetereAI Assurance AI Agent Security
Metere Consulting, LLC.
CapSeal: Capability-Sealed Secret Mediation for Secure Agent Execution
Apr 18, 2026Shutong Jin, Ruiyi Guo, Ray C. C. CheungAI Agent Security LLM Agent Security
City University of Hong Kong, Hong Kong · Beijing Foreign Studies University
A Survey on Long-Term Memory Security in LLM Agents: Attacks, Defenses, and Governance Across the Memory Lifecycle
Apr 17, 2026Zehao Lin, Xixuan Hao, Renyu Fu +5LLM Agent Security AI Agent Governance
MemTensor · Shanghai Jiao Tong University
HarmfulSkillBench: How Do Harmful Skills Weaponize Your Agents?
Apr 16, 2026Yukun Jiang, Yage Zhang, Michael Backes +2LLM Agent Security AI Agent Security Benchmarks
CISPA Helmholtz Center for Information Security
Dive into Claude Code: The Design Space of Today's and Future AI Agent Systems
Apr 14, 2026Jiacheng Liu, Xiaohan Zhao, Xinyi Shang +1AI Coding Agents LLM Agent Orchestration
1VILA Lab, Mohamed bin Zayed University of Artificial Intelligence · University College London
ProbeLogits: Kernel-Level LLM Inference Primitives for AI-Native Operating Systems
Apr 13, 2026Daeyeon SonLLM Inference LLM Guardrails
Independent Researcher Republic of Korea
T-MAP: Red-Teaming LLM Agents with Trajectory-aware Evolutionary Search
Mar 21, 2026Hyomin Lee, Sangwoo Park, Yumin Choi +3Adversarial Prompt Generation LLM Red Teaming
KAIST · University of California, Los Angeles
Towards Reliable Local Security Agents: Verifiable Post-Training for Linux Privilege Escalation
Mar 18, 2026Philipp Normann, Andreas Happe, Jürgen Cito +1LLM Agent Security LLM Post-Training
TU Wien, Vienna, Austria
AgentWorm: Self-Propagating Attacks Across LLM Agent Ecosystems
Mar 16, 2026Yihao Zhang, Zeming Wei, Xiaokun Luan +7LLM Agent Security Multi-Agent System Security
Peking University · Sun Yat-sen University · Wuhan University +2
Quantifying Frontier LLM Capabilities for Container Sandbox Escape
Mar 1, 2026Rahul Marchand, Art O Cathain, Jerome Wynne +5LLM Safety Benchmarks LLM Agent Security
University of Oxford · UK AI Security Institute
From Similarity to Vulnerability: Key Collision Attack on LLM Semantic Caching
Jan 30, 2026Zhixiang Zhang, Zesen Liu, Yuchong Xie +2Adversarial Attacks LLM Agent Security
Department of Computer Science and Engineering, The Hong Kong University of Science and Technology · Fudan University
Just Ask: Curious Code Agents Reveal System Prompts in Frontier LLMs
Jan 29, 2026Xiang Zheng, Yutao Wu, Hanxun Huang +5Prompt Injection AI Coding Agents
City University of Hong Kong · Deakin University · The University of Melbourne +3
AgenTRIM: Tool Risk Mitigation for Agentic AI
Jan 18, 2026Roy Betser, Amit Giloni, Shamik Bose +4LLM Agent Security Indirect Prompt Injection
Fujitsu Research of Europe (FRE) · Fujitsu Research of India Pvt. Ltd. (FRIPL)
Agent Tools Orchestration Leaks More: Dataset, Benchmark, and Mitigation
Dec 18, 2025Yuxuan Qiao, Dongqin Liu, Hongchang Yang +2LLM Agent Security LLM Agents
Institute of Information Engineering, Chinese Academy of Sciences · School of Cyber Security, University of Chinese Academy of Sciences
MAS-Shield: A Defense Framework for Secure and Efficient LLM MAS
Nov 28, 2025Kaixiang Wang, Zhaojiacheng Zhou, Bunyod Suvonov +8Multi-Agent LLM Systems LLM Auditing
Department of Computer Science and Engineering Shanghai Jiao Tong University Shanghai 200240, China
Breaking the Code: Security Assessment of AI Code Agents Through Systematic Jailbreaking Attacks
Oct 1, 2025Shoumik Saha, Jifan Chen, Sam Mayers +3AI Coding Agents AI Agent Security
University of Maryland – College Park · AWS AI Labs · Meta Superintelligence Labs
Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment
Sep 6, 2025Yuchong Xie, Mingyu Luo, Zesen Liu +7Prompt Injection AI Coding Agents
The Hong Kong University of Science and Technology, China · Fudan University, China
Meta-SecAlign: Training LLMs against Prompt Injection for Robust Agents
Jul 3, 2025Sizhe Chen, Arman Zharmagambetov, David Wagner +1LLM Agent Security AI Agent Security Benchmarks
FAIR at Meta · UC Berkeley
Seven Security Challenges in Cross-domain Multi-agent LLM Systems
May 28, 2025Ronny Ko, Jiseong Jeong, Shuyuan Zheng +4Multi-Agent LLM Systems LLM Agent Security
Osaka University · Seoul National University · Yonsei University
BodhiPromptShield: Pre-Inference Prompt Mediation for Surface-Form Privacy Propagation in LLM Agent Pipelines
Date pendingBo Ma, Jinsong Wu, Weiqi YanData Leakage Privacy-Preserving Language Models
Auckland University of Technology Auckland, New Zealand · Guilin University of Electronic Technology Guilin, China

Apr 24, 2026, cs.CRJ/K move · Enter open · S save

Sovereign Agentic Loops: Decoupling AI Reasoning from Execution in Real-World Systems

Jun He, Deying Yu

LLM Agent Security AI Agent Safety Cloud Computing AI Agent Governance

Open paper AskPDF arXiv

Large language model (LLM) agents increasingly issue API calls that mutate real systems, yet many current architectures pass stochastic model outputs directly to execution layers. We argue that this coupling creates a safety risk because model correctness, context awareness, and alignment cannot be assumed at execution time. We introduce Sovereign Agentic Loops (SAL), a control-plane architecture in which models emit structured intents with justifications, and the control plane validates those intents against true system state and policy before execution. SAL combines an obfuscation membrane, which limits model access to identity-sensitive state, with a cryptographically linked Evidence Chain for auditability and replay. We formalize SAL and show that, under the stated assumptions, it provides policy-bounded execution, identity isolation, and deterministic replay. In an OpenKedge prototype for cloud infrastructure, SAL blocks 93% of unsafe intents at the policy layer, rejects the remaining 7% via consistency checks, prevents unsafe executions in our benchmark, and adds 12.4 ms median latency.

Momentum

Related topics

Latest papers 234