XYEval: Agents say yes to bad advice
Not on the map. Why?
Abstract (arXiv)
Effective communication between users and AI agents is essential for human-AI collaboration. The XY problem is a well-known communication pitfall where a person asks about their attempted solution rather than their actual problem. We extend prior sycophancy evaluation to the XY problem in agentic settings, evaluating whether agents can resist plausible but misleading suggestions from users and communicate their reasoning. We introduce XYEval, a meta-evaluation framework that can transform an existing benchmark into an XY problem evaluation. We evaluate five models across six diverse benchmark suites. Agents suffer large XY drops under XY mutation across benchmarks, with relative drops reaching up to 46.7%. With τ2-bench, we further show that agent performance drops more when encountering a pedantic user who requires detailed explanations before approving a better solution. Our findings suggest that current agents lack the ability to effectively reason and communicate when facing misleading suggestions. A simple system instruction baseline that encourages awareness of XY problems only offers partial mitigation. Extensive trace analyses provide behavioral insights into how and why these XY drops occur across execution trajectories. Our results show that mitigating the XY problem remains challenging, requiring agents to both recognize user misdirection and clearly communicate the underlying problem.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 37 of its 46 references that are in the map. First posted on arXiv 20 Sep 2026.
Builds on
37 of 46 references.
References · 37
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2023Towards Understanding Sycophancy in Language Modelscited by 988
- 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 805
- 2025τ2-Bench: Evaluating Conversational Agents in a Dual-Control Environmentcited by 558
- 2024GSM-Symbolic: Understanding the Limitations of Mathematical Reasoning in Large Language Modelscited by 533
- 2026Terminal-Bench: Benchmarking Agents on Hard, Realistic Tasks in Command Line Interfacescited by 515
- 2024Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agentscited by 341
- 2025SWE-Bench Pro: Can AI Agents Solve Long-Horizon Software Engineering Tasks?cited by 254
- 2024GSM-Plus: A Comprehensive Benchmark for Evaluating the Robustness of LLMs as Mathematical Problem Solverscited by 155
- 2025WASP: Benchmarking Web Agent Security Against Prompt Injection Attackscited by 140
- 2024Dissecting Adversarial Robustness of Multimodal LM Agentscited by 118
- 2025SycEval: Evaluating LLM Sycophancycited by 101
25 more
- 2024The Art of Saying No: Contextual Noncompliance in Language Modelscited by 100
- 2025Measuring Sycophancy of Language Models in Multi-turn Dialoguescited by 91
- 2023Are You Sure? Challenging LLMs Leads to Performance Drops in The FlipFlop Experimentcited by 71
- 2022CREPE: Open-Domain Question Answering with False Presuppositionscited by 70
- 2024Modeling Future Conversation Turns to Teach LLMs to Ask Clarifying Questionscited by 70
- 2025QuestBench: Can LLMs ask the right question to acquire information in reasoning tasks?cited by 56
- 2022(QA)2: Question Answering with Questionable Assumptionscited by 51
- 2022Interactive Code Generation via Test-Driven User-Intent Formalizationcited by 50
- 2026MCP-Atlas: A Large-Scale Benchmark for Tool-Use Competency with Real MCP Serverscited by 46
- 2024On Targeted Manipulation and Deception when Optimizing LLMs for User Feedbackcited by 45
- 2024Learning to Ask: When LLM Agents Meet Unclear Instructioncited by 38
- 2025Ambig-SWE: Interactive Agents to Overcome Underspecificity in Software Engineeringcited by 28
- 2022Task Ambiguity in Humans and Language Modelscited by 27
- 2024Proactive Agents for Multi-Turn Text-to-Image Generation Under Uncertaintycited by 23
- 2025BrokenMath: A Benchmark for Sycophancy in Theorem Proving with LLMscited by 23
- 2025Flattery in Motion: Benchmarking and Analyzing Sycophancy in Video-LLMscited by 20
- 2026HiL-Bench (Human-in-Loop Benchmark): Do Agents Know When to Ask for Help?cited by 16
- 2025Cancer-Myth: Evaluating Large Language Models on Patient Questions with False Presuppositionscited by 15
- 2026Ask or Assume? Uncertainty-Aware Clarification-Seeking in Coding Agentscited by 15
- 2025When Benchmarks Talk: Re-Evaluating Code LLMs with Interactive Feedbackcited by 14
- 2026Ask don't tell: Reducing sycophancy in large language modelscited by 12
- 2025WiCkeD: A Simple Method to Make Multiple Choice Benchmarks More Challengingcited by 10
- 2025MultiHoax: A Dataset of Multi-hop False-Premise Questionscited by 8
- 2025Helpful Agent Meets Deceptive Judge: Understanding Vulnerabilities in Agentic Workflowscited by 6
- 2026XYBench: Can LLMs Respond Pragmatically to Queries with Misconceptions?cited by 1
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026Towards Faithful Agentic XAI: A Verification Method and an Open-World Benchmark for Better Model Faithfulness
- 2026Overseeing Agents Without Constant Oversight: Challenges and Opportunities
- 2026The "I Don't Know" Filter: Enhancing Agentic Reliability in Function Calling
- 2026Addressing the Selection Problem in Explainable AI
- 2026ClawArena: Benchmarking AI Agents in Evolving Information Environments
- 2024Agent-as-a-Judge: Evaluate Agents with Agents
- 2026Gaming the Judge: Unfaithful Chain-of-Thought Can Undermine Agent Evaluation
- 2026Agentic CLEAR: Automating Multi-Level Evaluation of LLM Agents