Preprint
Aug 2026
Benign Alone, Harmful Together: Exploiting Experience Composition in Self-Evolving LLM Agents
EvoBreak is an experience-conditioned sequential attack that operates through individually benign attack-stage tasks and induced experiences, revealing benign experience composition as a persistent attack surface in self-evolving agents.
Bing-Yu Yan, Xiao-Ming Zhang, Chao-Zhuo Li et al.
· 2 citations