Conflux: Preventing Privilege Escalation with Principal Contexts and System-Level Evaluation

Summary

Conflux is a principal-context defence against privilege escalation in LLM agents, enforced by a kernel called ITES that intersects the permissions of every principal influencing an action. The authors prove a conditional authority-confinement theorem for the represented value-influence fragment, and evaluate with SLED and SLED-V alongside AgentDojo, reporting bounded and partial evidence only.

Related items

• MediumCVE-2026-124588: huggingface finetrainers code injection via Library argumentSimilar attack · NVD/CVE Database
• MediumTaiwan-Based Hacker Used BOSSAI AI Agents to Steal Taipei Emergency Dispatch RecordsSimilar attack · The Hacker News
• MediumOn the hunt for ARTEX: understanding agentic attacks in AWS environmentsSimilar attack · Datadog Security Labs
• CriticalCVE-2026-102895: GPUStack Improper Authentication VulnerabilitySimilar attack · CISA Known Exploited Vulnerabilities
• HighCVE-2026-97677: IBM Langflow OSS arbitrary file write and read by authenticated flow authorsSimilar attack · NVD/CVE Database