From Approval to Abuse: Privilege Escalation Attacks on Harness-Protected Coding Agents

Xianglin Yang, Yechao Zhang, Jiahao Liu +4

Coding agents use execution harnesses to constrain the consequences of prompt injection by enforcing permission boundaries. These systems deterministically intercept any out-of-san…