The BaseResearcharXiv

Right Tool, Wrong Parameters: Defending LLM Agents Against Parameter Poisoning

According to the abstract, Yao Wang, Zehua Ma, Weiming Zhang and Han Fang study parameter poisoning, a prompt-injection attack that keeps the intended tool call but alters an argument such as a recipient. They propose AuthorityFlow, a defense that traces which information fields may determine each argument.

Open the source ↗

Why it matters

The same thing, for different readers.

What it means for you

Researchers describe an attack in which an AI agent does the right task but with a quietly altered detail, such as the recipient.

For researchers

Wang and colleagues argue defenses should judge whether an argument change came from a trusted source, not only whether a new action appeared.

How the finding was reached

In our words, from the source. Weigh the finding by how it was made.

What was done
Study of an indirect prompt injection variant that manipulates tool arguments while preserving the intended action, with a three-stage defense (AuthorityFlow) built on a task-specific trust hierarchy.
What it found
The excerpt describes the attack and the defense design; it contains no results figures.
What it does not show
Read from the abstract excerpt only (cut off before results); effectiveness claims are not visible.
Status
A preprint: not yet peer reviewed

The record

Questions
How is AI used in attacks, defence and war? · Are AI companies putting stronger safeguards into practice?
People
Yao Wang (Wrote it) · Zehua Ma (Wrote it) · Weiming Zhang (Wrote it) · Han Fang (Wrote it)
What we read
We have read only the description the publisher gives. No quotations until someone reads the source itself.
Found by
The Radar, run of November 4, 2026, via arxiv-ai-safety-query (tier 1: the source’s own channel or an official record)
Cite this
arXiv, “Right Tool, Wrong Parameters: Defending LLM Agents Against Parameter Poisoning”, November 3, 2026. Entry in the Ctrl AI Base, https://ctrlai.com/base/arxiv-2026-11-03-defending-agents-parameter-poisoning
Our notesLight lane: written from the triage excerpt only; results not visible.