Benign Alone, Harmful Together: Exploiting Experience Composition in Self-Evolving LLM Agents
EvoBreak is an experience-conditioned sequential attack that operates through individually benign attack-stage tasks and induced experiences, revealing benign experience composition as a persistent attack surface in self-evolving agents.