Cross-User Poisoning: User-Task Boundary Failures in Multi-User Collaborative Language Agents.

arXiv:2511.17671v2 Announce Type: replace-cross Abstract: Language agents are moving from single-user assistants to shared collaborators in workspaces, forums, and group chats. A shared agent observes interleaved messages from multiple users, maintains persist