Agent Hijacking Attacks

Why it matters

Agent hijacking has larger blast radius than chatbot injection. Understanding shapes agent security.

The architecture

Injection via input or retrieved data.

Agent follows injected instructions.

Executes attacker goals.

How it works end to end

Injection surfaces: user, retrieved docs, tool outputs.

Autonomy multiplies risk.

Defenses: capability + monitoring + HITL.