Showing cs.CRShow all
3 papers · 1 filter
cs.CR2026
Cooldown Landmines: Cross-Tenant Interference Attacks on LLM Gateways
Yudong Gao, Linghan Chen, Wenhan Wu +8
LLM gateways enforce separate tenant quotas while sharing model deployments and cooldown records that temporarily exclude failing backends. However, a tenant's request failure can…
cs.CR2026
Trust the Brand, Lose Control: How Identity Hijacks LLM Agent Orchestration
Xutao Mao, Rui Qian, Linghan Chen +5
LLM agents now execute tasks end to end with permission to change real systems and increasingly orchestrate subagents that differ in capability and cost. Prior work treats the choi…
cs.CR2026
MemMark: State-Evolution Attribution Watermarking for Agent Long-Term Memory Systems
Haobo Zhang, Xutao Mao, Guangyuan Dong +5
Memory-backed agents need provenance that can survive leaked or migrated snapshots, where logs, visible outputs, and trusted metadata may be absent. We propose MemMark, a state-evo…