Compaction Laundering Attack on Context-Compacting Coding Agents

# Compaction Laundering Attack on Context-Compacting Coding Agents

https://gcdradar.vercel.app/incidents/compaction-laundering-attack-on-context-compacting-coding-ag · AIR-2026-1462 · closed 2026-11-05

- Lane: Research
- Severity: 1 (Research / proof of concept)
- Fix status: Fix status unknown
- First reported: 2026-10-22
- AI role: Attack on AI

## Summary

Researchers demonstrate an exploitable trust boundary in popular open-source coding agents where context compaction destroys message provenance. Attackers can forge user turns that survive conversation summarization and persist in the agent's memory.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-10-22: Compaction Laundering: Provenance Destruction in Context-Compacting Coding Agents (https://arxiv.org/abs/2610.29869)

## Sources

- 2026-10-22 arXiv: Compaction Laundering: Provenance Destruction in Context-Compacting Coding Agents https://arxiv.org/abs/2610.29869

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.