Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go?

arXiv:2607.17986v2 Announce Type: replace-cross Abstract: Self-hosted AI agents maintain persistent memory, instructions, and configuration that influence their future behavior. If an agent is compromised, an attacker can exploit the agent's legitimate write p