Prépublication · 2026
Beyond Prompt Injection: The Tool Update Gap in LLM Agent Security
Shiyu Kan, Yue Qi et al. — Monde
Source : arXiv
Résumé
Large language model based agents increasingly rely on external tools to invoke services and interact with web resources. These tools can evolve through software updates, yet agentic frameworks may continue trusting them without re-verifying their safety after implementation changes. This tool update gap creates a supply-chain vulnerability in agentic systems: because updated tool code executes outside the LLM's context window, malicious functionality embedded in tool updates can bypass defenses centered on model-visible interactions, leaving agents exposed to stealthy, persistent threats that…