Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper analyzes the security vulnerabilities of multi-agent systems controlling industrial robots, focusing on a four-agent system called Cobot-Claw. They identify five novel attack classes specific to agentic cyber-physical systems and propose ZTPM, a Zero Trust Policy Model, to mitigate these risks. Empirical evaluation reveals that actuation parameter selection is model-dependent and non-deterministic, highlighting the necessity of policy enforcement at the physical actuation boundary.
Controlling robots with language models opens up terrifying new attack vectors, and current systems are far more vulnerable than you think.
Multi-agent systems powered by large foundation models (LFMs) are increasingly deployed to control industrial robots through natural language, creating deployments in which security failures produce physical consequences. We analyse this threat landscape through Cobot-Claw, a deployed four-agent system for UR3e robotic arm control, and identify five attack classes specific to agentic cyber-physical systems. We propose ZTPM, a Zero Trust Policy Model comprising 25 typed primitives across five enforcement domains with Physical Impact Tiers as a runtime policy dimension. An empirical evaluation across 60 execution traces on two LFM backends provides initial evidence that actuation parameter selection is model-dependent and non-deterministic, motivating the need for policy-level enforcement at the physical actuation boundary.