Loopjacking Vulnerability Allows Hijacking of Human-in-the-Loop Agent Approvals

Research demonstrates a Loopjacking vulnerability in agentic A2A implementations where a maker can replace a pending call with a different operation. In a LangGraph Agent Server test, an approval for a small transaction was redirected to execute a much larger transfer to an attacker-controlled sink.