CORTEXA
← Browse

Franziska Roesner

3 papers indexed

arxivcs.CRcs.AIcs.MA2026-07-16

Bad Memory: Evaluating Prompt Injection Risks from Memory in Agentic Systems

Soham Gadgil, David Alexander, Sai Sunku, Franziska Roesner

A growing class of agentic systems maintain persistent state across sessions through memory files, behavioral preferences, and knowledge bases. While this makes agents more useful and self-improving, it also creates a new attack surface for prompt injections in which malicious in…

View free PDFSource page
arxivcs.CRcs.AI2026-07-15

How Agents Ask for Permission: User Permissions for AI Agents, from Interfaces to Enforcement

Alexandra E. Michael, Franziska Roesner

As AI agents gain prevalence, users are increasingly exposed to the risks such systems entail. Prompt injection attacks, as well as hallucination, can cause agents to leak private information to third parties. As autonomous systems, agents also present the more active danger of p…

View free PDFSource page
arxivcs.AIcs.CR2026-07-01

Janus: a Playground for User-Involved Agentic Permission Management

Natalie Grace Brigham, Eugene Bagdasarian, Tadayoshi Kohno, Franziska Roesner

AI agents that autonomously execute tool calls on a user's behalf raise pressing questions about permission management: what role could users play, and what role should they play? Despite many proposed approaches, the user's role in agentic permission management remains under exp…

View free PDFSource page