Context privilege escalation in AI agent harnesses
Published Analyzed Source: arXiv
Context assembly can promote repository, tool or skill content into higher-priority instructions or persistent state. The paper studies 12 pinned agent-harness versions.
What's in Your Agent's Context? Context Privilege Escalation Attacks against AI Agent Harness
Evaluated models: GPT-5.5, GPT-5.4-mini, Claude Sonnet 4.6+4 more
- GPT-5.5
- GPT-5.4-mini
- Claude Sonnet 4.6
- Claude Opus 4.6
- Gemini 2.5 Flash
- Gemini 2.5 Pro
- DeepSeek V4 Flash