LLM-based agents deployed in product-level execution harnesses create greater risks through jailbreaks triggering harmful tool use and persistent state changes than unsafe text generation alone

LLM-based agents are increasingly deployed in product-level execution harnesses, where jailbreaks can trigger harmful tool use and persistent state changes, creating greater risks than unsafe text generation alone.

http://arxiv.org/abs/2608.27439v1