{"data":{"id":"750a4fdc-9d11-41dc-af17-4213e9b1a49d","title":"MAS-Guard: Unified Guardrails from Individual Agents to Multi-Agent LLM Systems","summary":"MAS-Guard is a unified guardrail framework for single- and multi-agent LLM applications with both instrumentable and opaque agents. It combines a local Agent Guardrail (A-Guard) layer that applies task-specific experts to agentic events with developer-owned Agent Charters and a Control Plane that run structural and semantic checks, enforcing allow, reflection, confirmation, and block interventions. Across six benchmarks and three agent LLMs from different providers, it reduced attack success rate by 71.5-86.3% relative to unguarded agents while meeting the utility reference criterion on benign tasks.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2610.28397v1","publishedAt":"2026-10-20T15:44:37.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["prompt_injection"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-20T15:44:37.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","safety"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":["AML.T0051"]}}