arXiv cs.AI
· Papers
PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection
arXiv:2607.16199v1 Announce Type: new Abstract: Multi-agent LLM systems increasingly rely on a Planner to decompose goals into sub-task sequences that downstream Executor and Critic agents execute and audit. We identify the planning phase as a critical attack surface: a single injection into the Planner's context achie