Preliminary research
What's in Your Agent's Context? Context Privilege Escalation Attacks against AI Agent Harness
AI-collected research leads through 22 September 2026, including targeted additions between broader sweeps. Unranked, incomplete, not community-vetted, and subject to change.
CoRA discovers which files and metadata enter an agent's context, then checks their message roles and persistence. The paper maps sixteen vectors and five attack chains; its contribution is a systematic harness audit, while role promotion and persistent memory poisoning have earlier published precedents.
Record
- Researcher
- Zichuan Li, Jian Cui, Ashley Chen, Xiaojing Liao and Luyi Xing
- Published by
- arXiv
- Date
- Format
- Whitepaper
- Topic
- AI
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Zichuan Li, Jian Cui, Ashley Chen, Xiaojing Liao and Luyi Xing, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .