Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
The authors investigate artifact-mediated propagation, a failure mode where adversarial payloads hop between stateful LLM assistants by exploiting shared persistent artifacts (e.g., reports) and long-term memory. This vulnerability exposes a critical systemic risk in collaborative multi-agent environments, transforming passive document sharing into an asynchronous, indirect vector for self-replicating malware. In temporal multi-agent simulation environments, the attacks survived extended interaction sequences and infected 60–80% of independent agents across chains up to eight hops long, even when powered by frontier models like GPT-5.6 Luna.
Shared workspace files can turn stateful LLM assistants into self-replicating malware vectors, silently compromising up to 80% of independent agents across eight consecutive hops via persistent memory.
Large language models are increasingly deployed as stateful assistants that retain information across interactions and use tools to read, modify, and create persistent artifacts. As these artifacts are shared between users, they form an indirect communication channel between otherwise independent assistants. We study a failure mode in which this channel enables self-propagating attacks. We introduce artifact-mediated propagation, where adversarial content introduced through an artifact (e.g. a report), is stored in an assistant's persistent memory, reproduced in a subsequently created artifact, and acquired by another assistant that later reads it. We evaluate this process in temporal human-agent universes that model artifact exchange between independently operated assistants over time, measuring whether an attack survives successive hand-offs, how many hops it reaches, and how broadly it spreads. We find that attacks can propagate across multiple independent assistants and persist over extended interaction sequences. In larger simulated environments, even GPT-5.6 Luna exhibits substantial spread, reaching 60-80% of agents with propagation chains extending to eight hops. These results show that persistent artifacts can act as durable carriers of adversarial state, allowing attacks to outlive individual interactions and spread across isolated assistants.