False Prophets: On the Security of World Models in Agentic Systems
It is argued that some risks are intrinsic to approximate world modeling, and shown that attackers can induce mispredictions in agentic pipelines with up to 95% success rate, possibly resulting in unintended command execution, denial of service, drainage of wallet and private information extraction.