{"data":{"id":"432cb3d6-4291-4a60-9f7d-20a808097f26","title":"Beyond Prompt Injection: The Tool Update Gap in LLM Agent Security","summary":"Researchers introduce ETUDE (Exploiting Tool Updates for Direct Execution), an attack that embeds malicious functionality into updates of initially benign tools while preserving their legitimate behavior. Because updated tool code runs outside the LLM's context window, the attack bypasses defenses limited to model-visible content. Across three attack workloads and seven agentic frameworks, including Gemini CLI, Codex CLI, and Claude Code, ETUDE reached a 97.6% ASR with a 95.9% legitimate task completion rate, and the authors found existing defenses insufficient.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2611.01976v1","publishedAt":"2026-11-01T15:14:02.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["supply_chain","other"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Gemini CLI","Codex CLI","Claude Code"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-01T15:14:02.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity","confidentiality","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":["AML.T0010"]}}