{"total":15,"rows":[{"id":"2502.13172","title":"Unveiling Privacy Risks in LLM Agent Memory","created":"2025-02-17","cited_by_count":101,"area":"agents"},{"id":"2506.23260","title":"From Prompt Injections to Protocol Exploits: Threats in LLM-Powered AI Agents Workflows","created":"2025-06-29","cited_by_count":58,"area":"agents"},{"id":"2604.02623","title":"Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents","created":"2026-04-03","cited_by_count":24,"area":"agents"},{"id":"2604.09747","title":"ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying","created":"2026-04-10","cited_by_count":5,"area":"agents"},{"id":"2603.22751","title":"Observable Channels, Not Just Storage: Evaluating Privacy Leakage in LLM Agent Pipelines","created":"2026-03-24","cited_by_count":4,"area":"agents"},{"id":"2604.18231","title":"AgenTEE: Confidential LLM Agent Execution on Edge Devices","created":"2026-04-20","cited_by_count":4,"area":"agents"},{"id":"2608.23471","title":"InjecMEM: Memory Injection Attack on LLM Agent Memory Systems","created":"2026-08-24","cited_by_count":4,"area":"agents"},{"id":"2607.23444","title":"Isolated but Exposed: Persistence-Based Memory Extraction Attack on LLM Agents","created":"2026-07-26","cited_by_count":2,"area":"agents"},{"id":"2607.12406","title":"Isolation as a First-Class Principle for LLM-Agent System Safety: Concepts, Taxonomy, Challenges and Future Directions","created":"2026-07-14","cited_by_count":1,"area":"agents"},{"id":"2606.26627","title":"Agents That Know Too Much: A Data-Centric Survey of Privacy in LLM Agents","created":"2026-06-25","cited_by_count":0,"area":"agents"},{"id":"2608.30288","title":"Extracting Knowledge from Tools in LLM Agents","created":"2026-08-31","cited_by_count":0,"area":"agents"},{"id":"2609.01663","title":"Context Inference Attacks Without Jailbreaks","created":"2026-08-31","cited_by_count":0,"area":"agents"},{"id":"2609.03815","title":"Inferring Hidden User Models from the Behavior of Personalized LLM Agents","created":"2026-09-03","cited_by_count":0,"area":"agents"},{"id":"2609.21686","title":"CIPL: A Channel-Aware Framework for Recoverable Privacy Leakage in LLM Agents","created":"2026-09-18","cited_by_count":0,"area":"agents"},{"id":"2609.23894","title":"Connecting the Dots in Agentic AI Security: A Cross-Dimensional Threat Taxonomy, Evaluation Maturity, and Open Challenges","created":"2026-09-20","cited_by_count":0,"area":"agents"}],"next_cursor":null}