Privilege Escalation via Adversarial Context in Coding Agent Harnesses
October 19, 2026
Adversarial context in repositories can manipulate coding agents into requesting dangerously broad allow-rules for user approval. Once a user approves these rules to reduce fatigue, the harness is effectively blinded, allowing the attacker to execute unauthorized actions beyond the immediate task.
HOW THIS AFFECTS YOU
●
builderYou must design permission-update workflows that validate the scope of proposed allow-rules against untrusted context.
●
policyThis highlights a critical safety gap in how automated sandboxes handle user-in-the-loop authorization.