GRAD: Graph-Structured Antibody Defense for LLM Agents

Summary

GRAD is a defense for LLM agents against memory poisoning and decomposition attacks, which spread malicious evidence across multiple operations. It combines graph-based evidence aggregation across operations with an extensible set of detection experts that are added on frozen encoder snapshots and routed by graph signatures. Across Decomp, MCP, and MRT it reports AUROCs of 97.19%, 77.59%, and 86.60%, and its continual adaptation improves final accuracy by 13.08 percentage points over Replay.

Related items

• MediumCVE-2026-111991: WongKinYiu yolov9 code injection via ONNX Metadata HandlerSimilar attack · NVD/CVE Database
• LowWhat are self-replicating ‘AI worms’, and why is Anthropic worried about them?Similar attack · The Guardian Technology
• MediumCVE-2026-112047: OneUptime incorrect authorization in cluster actions by project membersSimilar attack · NVD/CVE Database
• HighCVE-2026-96620: Claude Agent SDK argument injection via resume option enabling command executionSimilar attack · NVD/CVE Database
• HighCVE-2026-59970: Tandoor Recipes SSRF through AI provider URL in AI actionsSimilar attack · NVD/CVE Database