Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents.

arXiv:2605.28201v2 Announce Type: replace Abstract: Large Language Model (LLM) agents remain vulnerable to safety threats from the external environment, where attackers inject adversarial content into external observations such as tool-returned data, webpages,