No Attacker Needed: Unintentional Cross-User Contamination in Shared-State LLM Agents
arXiv:2604.01350v1 Announce Type: new
Abstract: LLM-based agents increasingly operate across repeated sessions, maintaining task states to ensure continuity. In many deployments, a single agent serves multiple users within a team or organization, reus…