mlsanityData to 14 Oct 2026

Automation-Exploit: A Multi-Agent LLM Framework for Adaptive Offensive Security with Digital Twin-Based Risk-Mitigated Exploitation

arXiv 2604.22427 ↗First posted 24 Apr 2026cs.CRcited by 1

On the map: LLM agents and tool use → Agent threats, guardrails and governance

also in 1 more
Abstract (arXiv)

The offensive security landscape is highly fragmented: enterprise platforms avoid memory-corruption vulnerabilities due to Denial of Service (DoS) risks, Automatic Exploit Generation (AEG) systems suffer from semantic blindness, and Large Language Model (LLM) agents face safety alignment filters and "Live Fire" execution hazards. We introduce Automation-Exploit, a fully autonomous Multi-Agent System (MAS) framework designed for adaptive offensive security in complex black-box scenarios. It bridges the abstraction gap between reconnaissance and exploitation by autonomously exfiltrating executables and contextual intelligence across multiple protocols, using this data to fuel both logical and binary attack chains. The framework introduces an adaptive safety architecture to mitigate DoS risks. While it natively resolves logical and web-based vulnerabilities, it employs a conditional isomorphic validation for high-risk memory-corruption flaws: if the target binary is successfully exfiltrated, it dynamically instantiates a cross-platform digital twin. By enforcing strict state synchronization, including libc alignment and runtime file descriptor hooking, potentially destructive payloads are iteratively debugged in an isolated replica. This enables a highly risk-mitigated "one-shot" execution on the physical target. Empirical evaluations across eight scenarios, including undocumented zero-day environments to rule out LLM data contamination, validate the framework's architectural resilience, demonstrating its ability to prevent "live fire" crashes and execute risk-mitigated compromises on actual targets.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 23 of its 50 references that are in the map. First posted on arXiv 24 Apr 2026.

Builds on

23 of 50 references.

Closest ancestors · 3

Same direction, newest first

  1. 2025Automated Penetration Testing with LLM Agents and Classical Planning11 Dec
  2. 2025AutoPentest: Enhancing Vulnerability Management With Autonomous LLM Agents15 May
  3. 2024PentestAgent: Incorporating LLM Agents to Automated Penetration Testing7 Nov

Other references · 20

  1. 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
  2. 2023Reflexion: Language Agents with Verbal Reinforcement Learningcited by 4,276
  3. 2023Lost in the Middle: How Language Models Use Long Contextscited by 3,455
  4. 2023Self-RAG: Learning to Retrieve, Generate, and Critique through Self-Reflectioncited by 1,839
  5. 2023Improving Factuality and Reasoning in Language Models through Multiagent Debatecited by 1,784
  6. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
  7. 2023A Survey on Hallucination in Large Language Models: Principles, Taxonomy, Challenges, and Open Questionscited by 1,601
  8. 2023The Rise and Potential of Large Language Model Based Agents: A Surveycited by 1,439
  9. 2023Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrationscited by 431
  10. 2023GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Ciphercited by 423
  11. 2023Low-Resource Languages Jailbreak GPT-4cited by 309
  12. 2024Long-context LLMs Struggle with Long In-context Learningcited by 286
8 more
  1. 2024CodeChameleon: Personalized Encryption Framework for Jailbreaking Large Language Modelscited by 76
  2. 2019Exploit Prediction Scoring System (EPSS)cited by 22
  3. 2024Data Poisoning for In-context Learningcited by 21
  4. 2026Dynamic Model Routing and Cascading for Efficient LLM Inference: A Surveycited by 19
  5. 2025Adversarial Poetry as a Universal Single-Turn Jailbreak Mechanism in Large Language Modelscited by 15
  6. 2024KGV: Integrating Large Language Models with Knowledge Graphs for Cyber Threat Intelligence Credibility Assessmentcited by 9
  7. 2025Shadows in the Attention: Contextual Perturbation and Representation Drift in the Dynamics of Hallucination in LLMscited by 9
  8. 2025PentestEval: Benchmarking LLM-based Penetration Testing with Modular and Stage-Level Designcited by 7

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2025Bridging AI and Software Security: A Comparative Vulnerability Assessment of LLM Agent Deployment Paradigms
  2. 2025From Prompt Injections to Protocol Exploits: Threats in LLM-Powered AI Agents Workflows
  3. 2026Autonomous LLM Agents & CTFs: A Second Look
  4. 2026Autonomous LLM Agent Worms: Cross-Platform Propagation, Automated Discovery and Temporal Re-Entry Defense
  5. 2026Taming OpenClaw: Security Analysis and Mitigation of Autonomous LLM Agent Threats
  6. 2025A Multi-Agent LLM Defense Pipeline Against Prompt Injection Attacks
  7. 2025Comprehensive Vulnerability Analysis is Necessary for Trustworthy LLM-MAS
  8. 2026Beyond Handcrafted Security: Towards Self-Evolving Defense for LLM Agents