From Approval to Abuse: Privilege Escalation Attacks on Harness-Protected Coding Agents.

arXiv:2610.22987v1 Announce Type: new Abstract: Coding agents use execution harnesses to constrain the consequences of prompt injection by enforcing permission boundaries. These systems deterministically intercept any out-of-sandbox action and prompt the user