Plant, Persist, Trigger: Sleeper Attack on Large Language Model Agents

arXiv:2605.28201 · cs.AI · Submitted 2026-05-27 · Read on arXiv

cs.AI

Submitted: 2026-05-27

Updated: 2026-10-05

Terminology

• Large Language Model — 2× in this paper
• Benchmark — 1× in this paper · explained in 2 episodes
• Large Language Model (LLM) — 1× in this paper · explained in 3 episodes

Related papers

• MAVEN-T: Reinforced Heterogeneous Distillation for Real-Time Multi-Agent Trajectory Prediction
• Model Discovery Agent: LLM-assisted Bayesian experiment design for data-efficient discovery of mechanistic world models
• Agents' Last Exam
• The Clinician's Veto: Navigating Trust, Liability, and Uncertainty in Autonomous AI Prescribing
• MindHelper: Closed-Loop Embodied Mental-State Reasoning for Precision Intervention
• Incumbent Advantage: Brand Bias and Cognitive Manipulation Dynamics in LLM Recommendation Systems