Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go?
arXiv:2607.17986v2 Announce Type: replace-cross Abstract: Self-hosted AI agents maintain persistent memory, instructions, and configuration that influence their future behavior. If an agent is comprom