CARI: Cross-Boundary Adversarial Runtime Injection in Coding-Agent Workflows

# CARI: Cross-Boundary Adversarial Runtime Injection in Coding-Agent Workflows

https://gcdradar.vercel.app/incidents/cari-cross-boundary-adversarial-runtime-injection-in-coding · AIR-2026-1689 · closed 2026-11-13

- Lane: Research
- Severity: 1 (Research / proof of concept): Research paper demonstrating a novel attack vector with no known real-world exploitation.
- Fix status: Fix status unknown
- First reported: 2026-10-30
- AI role: Attack on AI
- Products: Coding Agents

## Summary

Researchers demonstrated a cross-boundary adversarial runtime injection attack targeting coding agents through manipulated peer development components and runtime feedback. The technique allows malicious or compromised peer roles to influence coding agent execution and code integration.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-10-30: CARI: Cross-Boundary Adversarial Runtime Injection in Coding-Agent Workflows (https://arxiv.org/abs/2610.38799)

## Sources

- 2026-10-30 arXiv: CARI: Cross-Boundary Adversarial Runtime Injection in Coding-Agent Workflows https://arxiv.org/abs/2610.38799

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.