From Attack Surface to Defense Architecture for Agentic Coding Harnesses
Researchers analyze the security implications of coupling language models with local system utilities in agentic coding harnesses. The study details how prompt injection can transform dual-use binaries into unintended payloads.
why this severityResearch paper demonstrating an attack vector with no known exploitation.
- first report
- 11 Nov 2026
- last update
- 11 Nov 2026
Timeline · 1
Sources · 1
Research and catalogues
- 2026-11-11From Attack Surface to Defense Architecture: Compositional Security for Agentic Coding HarnessesarXiv · arxiv.org/abs/2611.13960
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Research
- AI role
- Attack on AI
- categories
- Prompt injectionAgent hijack
- severity
- 1 · Research / proof of concept
- targets
- Framework / tooling
- owasp llm top 10
- LLM01:2025 Prompt InjectionLLM06:2025 Excessive Agency
- dates
- happened 11 Nov 2026 · first reported 11 Nov 2026
- origin
- News & research feeds
- record
- confidence 0.90 · created 2026-11-11 23:41Z · updated 2026-11-11 23:41Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# From Attack Surface to Defense Architecture for Agentic Coding Harnesses https://gcdradar.vercel.app/incidents/from-attack-surface-to-defense-architecture-for-agentic-codi · AIR-2026-1915 · live - Lane: Research - Severity: 1 (Research / proof of concept): Research paper demonstrating an attack vector with no known exploitation. - Fix status: Fix status unknown - First reported: 2026-11-11 - AI role: Attack on AI ## Summary Researchers analyze the security implications of coupling language models with local system utilities in agentic coding harnesses. The study details how prompt injection can transform dual-use binaries into unintended payloads. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-11-11: From Attack Surface to Defense Architecture: Compositional Security for Agentic Coding Harnesses (https://arxiv.org/abs/2611.13960) ## Sources - 2026-11-11 arXiv: From Attack Surface to Defense Architecture: Compositional Security for Agentic Coding Harnesses https://arxiv.org/abs/2611.13960 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- liveManipulating Abstention in Tool-Using AI Agents via Fabricated Warnings
Research · since 13 Nov 2026
AI - liveMobileProbe: Adaptive Security Evaluation of Mobile Agents via Trajectory-Aware Injection
Research · since 13 Nov 2026
AI - livePrompt Injection, Esq.: pwning AI agent guardrails with lawyerspeak
Research · since 11 Nov 2026
AI - liveBeyond Instruction Override: Benchmarking Indirect Prompt Injection
Research · since 6 Nov 2026
AI - liveLLM agents Defending LLM Agents Against Parameter Poisoning
Research · since 4 Nov 2026
AI - liveLLM search agents Adversarial Self-Evolving Attacks on Search Agents
Research · since 4 Nov 2026
AI