Unverified50% confidenceFactExact time
Data exfiltration refers to an Agent being manipulated during task execution to send sensitive information to an external endpoint controlled by an attacker.
1
Sources
50%
Confidence
Long-term
Relevance
9/18/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedAttackers can induce agents to execute a sequence of seemingly normal operations—such as querying user data, calling formatting tools, and triggering email sending—to form a data exfiltration chain.76% similarUnverifiedAttackers can exfiltrate sensitive information out of the sandbox through legitimate outbound channels by embedding malicious code in dependency packages (supply chain attacks).73% similarUnverifiedStealthy false data injection refers to attackers carefully crafting tampered data to bypass conventional anomaly detection mechanisms.72% similarUnverifiedPrompt injection or abnormal user input may allow an Agent to access data that should have been blocked or perform operations that should not have been executed, which is an architectural-layer vulnerability where permission checks are bypassed.71% similarUnverified提示注入在Agent系统中尤为危险，因为被攻陷的Agent可能拥有发送邮件、删除文件、调用支付API等真实世界权限71% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/932333API
curl https://kongchang.com/api/v1/knowledge/claims/932333MCP
get_claim(id=932333)