ChronosAttack: Adversarial Tool Scheduling Attacks on LLM Agents

arXiv:2609.27857 · cs.CR, cs.LG · Submitted 2026-08-20 · Read on arXiv

cs.CR, cs.LG

Submitted: 2026-08-20

Updated: 2026-08-20

Code: https://github.com/arashVsh/ChronosAttack

Terminology

• Consistency — 10× in this paper · explained in 3 episodes
• Robustness — 4× in this paper · explained in 5 episodes
• Adversarial Attacks — 2× in this paper · explained in 1 episode
• Agent Memory — 2× in this paper · explained in 1 episode
• AI Agents — 1× in this paper · explained in 2 episodes
• Agent Architectures — 1× in this paper · explained in 1 episode
• Agentic AI — 1× in this paper · explained in 1 episode
• Alignment — 1× in this paper · explained in 1 episode
• Benchmark — 1× in this paper · explained in 2 episodes
• Benchmarking — 1× in this paper · explained in 3 episodes
• Explainability — 1× in this paper · explained in 3 episodes
• Large Language Model (LLM) — 1× in this paper · explained in 3 episodes
• Model Context Protocol — 1× in this paper
• Model Context Protocol (MCP) — 1× in this paper · explained in 8 episodes
• Positional Bias — 1× in this paper · explained in 2 episodes
• World Model — 1× in this paper · explained in 7 episodes

Sources

• Prompt Injection Attack to Tool Selection in LLM Agents
• MalTool: Malicious Tool Attacks on LLM Agents
• From Untrusted Input to Trusted Memory: A Systematic Study of Memory Poisoning Attacks in LLM Agents
• The Attack and Defense Landscape of Agentic AI: A Comprehensive Survey
• Async Control: Stress-testing Asynchronous Control Measures for LLM Agents
• AgentSentry: Mitigating Indirect Prompt Injection in LLM Agents via Temporal Causal Diagnostics and Context Purification
• AttriGuard: Defeating Indirect Prompt Injection in LLM Agents via Causal Attribution of Tool Invocations
• ToolHazard: Scaling Adversarial Environments for Security Evaluation and Alignment of LLM-based Agents
• ConformalShift: Targeted Event Reordering Against Adaptive ECG Monitoring
• CohortHijack: Robustness of Single Cell Annotation to Companion Cell Removal

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs