4 papers
When Context Gets Root: Privilege Escalation in LLM Harnesses
Xingbang He, Yuanwei Chen, Yi Qian +6
Instruction hierarchy is a model-side defense that assigns instructions different levels of privilege according to their sources. These levels constrain which content may direct mo…
VulnAgent-R2: Evidence-Calibrated Multi-Agent Auditing for Repository-Level Vulnerability Detection
Renwei Meng, Haoyi Wu, Jingming Wang
Software vulnerabilities often depend on cross-file data flow, build options, framework conventions, and runtime guards, so isolated function classifiers produce fragile and poorly…
FeatureFuzz: Treating Bug-prone Features as Core Primitives for Compiler Fuzzing
Xingbang He, Yuanwei Chen, Hao Wu +9
CI/CD pipelines often execute build and test tasks with high privileges, making the compilation stage security-sensitive. In this setting, malicious pull requests may exploit caref…
Mind the Gap: Action Rebinding Attacks against Android GUI Agents
Yi Qian, Kunwei Qian, Xingbang He +7
Large multimodal model powered GUI agents are emerging as high-privilege operators on mobile platforms, entrusted to perceive screen content and inject inputs across application bo…