{"id":"https://openalex.org/W7154106924","doi":"https://doi.org/10.19139/soic-2310-5070-3574","title":"Cascading Instruction Influence Indirect Prompt Injection in Hierarchical Multi-Agent Systems","display_name":"Cascading Instruction Influence Indirect Prompt Injection in Hierarchical Multi-Agent Systems","publication_year":2026,"publication_date":"2026-03-24","ids":{"openalex":"https://openalex.org/W7154106924","doi":"https://doi.org/10.19139/soic-2310-5070-3574"},"language":"en","primary_location":{"id":"doi:10.19139/soic-2310-5070-3574","doi":"https://doi.org/10.19139/soic-2310-5070-3574","is_oa":true,"landing_page_url":"https://doi.org/10.19139/soic-2310-5070-3574","pdf_url":null,"source":{"id":"https://openalex.org/S2764412775","display_name":"Statistics Optimization & Information Computing","issn_l":"2310-5070","issn":["2310-5070","2311-004X"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","poland-20","russia-white-list-2"],"host_organization":"https://openalex.org/P4310321236","host_organization_name":"International Academic Press","host_organization_lineage":["https://openalex.org/P4310321236"],"host_organization_lineage_names":["International Academic Press"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Statistics, Optimization & Information Computing","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.19139/soic-2310-5070-3574","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5106463944","display_name":"Mohamed Refaat Abdellah","orcid":"https://orcid.org/0009-0009-4338-6912","observed_orcids":["https://orcid.org/0009-0009-4338-6912"]},"institutions":[{"id":"https://openalex.org/I154632036","display_name":"Misr University for Science and Technology","ror":"https://ror.org/05debfq75","country_code":"EG","type":"education","lineage":["https://openalex.org/I154632036"]}],"countries":["EG"],"is_corresponding":false,"raw_author_name":"Mohamed Refaat Mohamed Abdellah","raw_affiliation_strings":["The Department of Computer Science, College of Information Technology, Misr University for Science and Technology, Cairo, Egypt"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Department of Computer Science, College of Information Technology, Misr University for Science and Technology, Cairo, Egypt","institution_ids":["https://openalex.org/I154632036"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5087738195","display_name":"Alber S. Aziz","orcid":"https://orcid.org/0000-0002-3822-7046","observed_orcids":["https://orcid.org/0000-0002-3822-7046"]},"institutions":[{"id":"https://openalex.org/I4210165376","display_name":"October 6 University","ror":"https://ror.org/05y06tg49","country_code":"EG","type":"education","lineage":["https://openalex.org/I4210165376"]}],"countries":["EG"],"is_corresponding":false,"raw_author_name":"Alber S. Aziz","raw_affiliation_strings":["Faculty of Information Systems and Computer Science, October 6th University, Cairo, Egypt"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Information Systems and Computer Science, October 6th University, Cairo, Egypt","institution_ids":["https://openalex.org/I4210165376"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"15","issue":"6","first_page":"5445","last_page":"5458"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0006000000284984708,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/indirect-prompt-injection","display_name":"indirect prompt injection","score":0.9010000228881836},{"id":"https://openalex.org/keywords/hierarchical-multi-agent-systems","display_name":"hierarchical multi-agent systems","score":0.8790000081062317},{"id":"https://openalex.org/keywords/llm-security","display_name":"LLM security","score":0.7760000228881836},{"id":"https://openalex.org/keywords/delegation-chains","display_name":"delegation chains","score":0.5320000052452087},{"id":"https://openalex.org/keywords/sandboxing","display_name":"sandboxing","score":0.6520000100135803},{"id":"https://openalex.org/keywords/eu-cyber-resilience-act","display_name":"EU Cyber Resilience Act","score":0.8690000176429749},{"id":"https://openalex.org/keywords/attack-propagation","display_name":"attack propagation","score":0.44200000166893005},{"id":"https://openalex.org/keywords/autogen","display_name":"AutoGen","score":0.5630000233650208},{"id":"https://openalex.org/keywords/langgraph","display_name":"LangGraph","score":0.8420000076293945},{"id":"https://openalex.org/keywords/crewai","display_name":"CrewAI","score":0.9879999756813049}],"concepts":[{"id":"https://openalex.org/C31170391","wikidata":"https://www.wikidata.org/wiki/Q188619","display_name":"Hierarchy","level":2,"score":0.6207000017166138},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6123999953269958},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5476999878883362},{"id":"https://openalex.org/C86532276","wikidata":"https://www.wikidata.org/wiki/Q1184065","display_name":"Delegation","level":2,"score":0.49079999327659607},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4433000087738037},{"id":"https://openalex.org/C119323957","wikidata":"https://www.wikidata.org/wiki/Q5048226","display_name":"Cascading failure","level":4,"score":0.42910000681877136},{"id":"https://openalex.org/C2908647359","wikidata":"https://www.wikidata.org/wiki/Q2625603","display_name":"Population","level":2,"score":0.41929998993873596},{"id":"https://openalex.org/C46355384","wikidata":"https://www.wikidata.org/wiki/Q726686","display_name":"Compromise","level":2,"score":0.3935999870300293},{"id":"https://openalex.org/C199845137","wikidata":"https://www.wikidata.org/wiki/Q145490","display_name":"Network topology","level":2,"score":0.33079999685287476},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.3215000033378601},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.3174999952316284},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.30570000410079956},{"id":"https://openalex.org/C2778067643","wikidata":"https://www.wikidata.org/wiki/Q166507","display_name":"Interval (graph theory)","level":2,"score":0.3043000102043152},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.2856000065803528},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2831000089645386},{"id":"https://openalex.org/C184720557","wikidata":"https://www.wikidata.org/wiki/Q7825049","display_name":"Topology (electrical circuits)","level":2,"score":0.26919999718666077},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.26919999718666077},{"id":"https://openalex.org/C37381756","wikidata":"https://www.wikidata.org/wiki/Q20203288","display_name":"Representativeness heuristic","level":2,"score":0.26589998602867126},{"id":"https://openalex.org/C187691185","wikidata":"https://www.wikidata.org/wiki/Q2020720","display_name":"Grid","level":2,"score":0.2648000121116638},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.25450000166893005},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2513999938964844}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.19139/soic-2310-5070-3574","doi":"https://doi.org/10.19139/soic-2310-5070-3574","is_oa":true,"landing_page_url":"https://doi.org/10.19139/soic-2310-5070-3574","pdf_url":null,"source":{"id":"https://openalex.org/S2764412775","display_name":"Statistics Optimization & Information Computing","issn_l":"2310-5070","issn":["2310-5070","2311-004X"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","poland-20","russia-white-list-2"],"host_organization":"https://openalex.org/P4310321236","host_organization_name":"International Academic Press","host_organization_lineage":["https://openalex.org/P4310321236"],"host_organization_lineage_names":["International Academic Press"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Statistics, Optimization & Information Computing","raw_type":"journal-article"},{"id":"pmh:oai:ojs.localhost:article/3574","doi":null,"is_oa":true,"landing_page_url":"https://iapress.org/index.php/soic/article/view/3574","pdf_url":"http://iapress.org/index.php/soic/article/download/3574/1866","source":{"id":"https://openalex.org/S4306402441","display_name":"Statistics, Optimization & Information Computing (University of Cambridge)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I241749","host_organization_name":"University of Cambridge","host_organization_lineage":["https://openalex.org/I241749"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"2311-004X","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.19139/soic-2310-5070-3574","doi":"https://doi.org/10.19139/soic-2310-5070-3574","is_oa":true,"landing_page_url":"https://doi.org/10.19139/soic-2310-5070-3574","pdf_url":null,"source":{"id":"https://openalex.org/S2764412775","display_name":"Statistics Optimization & Information Computing","issn_l":"2310-5070","issn":["2310-5070","2311-004X"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","poland-20","russia-white-list-2"],"host_organization":"https://openalex.org/P4310321236","host_organization_name":"International Academic Press","host_organization_lineage":["https://openalex.org/P4310321236"],"host_organization_lineage_names":["International Academic Press"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Statistics, Optimization & Information Computing","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7154106924.pdf","grobid_xml":"https://content.openalex.org/works/W7154106924.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7214671675","https://openalex.org/W7204536562","https://openalex.org/W7213915615","https://openalex.org/W7128496244","https://openalex.org/W7220652227","https://openalex.org/W7222558873","https://openalex.org/W7159765187","https://openalex.org/W7213563890","https://openalex.org/W7138840503","https://openalex.org/W7214049783"],"abstract_inverted_index":{"Hierarchical":[0],"delegation":[1,181],"in":[2,61],"multi-agent":[3],"LLM":[4],"systems,":[5],"architectures":[6],"now":[7],"common":[8],"across":[9,175],"AutoGen,":[10],"LangGraph,and":[11],"CrewAI":[12],"deployments,":[13],"creates":[14],"attack":[15,186],"surfaces":[16],"that":[17,56,65,87,196],"single-agent":[18],"security":[19,199],"models":[20],"simply":[21],"do":[22],"not":[23,118,216],"address.":[24],"This":[25,52],"paper":[26],"examines":[27],"indirect":[28],"prompt":[29],"injection":[30],"propagation":[31,138],"through":[32,180],"three-tier":[33],"command":[34],"chains.The":[35],"effect":[36,53,91],"is":[37,200],"substantial.":[38],"Comparing":[39],"hierarchical":[40,62],"to":[41,81,188,208],"centralized":[42,67],"topologies":[43],"yields":[44],"Cohen\u2019s":[45],"d":[46,103],"=":[47],"2.34":[48,71],"(95%":[49],"CI:":[50],"1.82\u20132.86).":[51],"size":[54],"indicates":[55],"the":[57,88,110,131,140],"mean":[58],"compromise":[59,156],"rate":[60],"configurations":[63],"exceeds":[64,113],"of":[66],"systems":[68],"by":[69,202],"approximately":[70],"standard":[72],"deviations.":[73],"The":[74,194],"95%":[75,85],"confidence":[76],"interval":[77],"ranging":[78],"from":[79,150],"1.82":[80],"2.86":[82],"suggests":[83],"with":[84],"certainty":[86],"true":[89],"population":[90],"lies":[92],"within":[93],"this":[94,114,137],"bound,":[95],"ruling":[96],"out":[97],"null":[98],"or":[99],"trivial":[100],"effects.":[101],"Conventionally,":[102],">":[104],"0.8":[105],"represents":[106],"a":[107],"large":[108],"effect;":[109],"observed":[111],"magnitude":[112],"threshold":[115],"substantially,":[116],"indicating":[117],"merely":[119],"statistical":[120],"significance":[121],"but":[122],"practical":[123],"importance.":[124],"To":[125],"emphasis:":[126],"hierarchy":[127,197],"depth":[128],"nearly":[129],"triples":[130],"standardized":[132],"risk":[133],"exposure.":[134],"We":[135,205],"formalize":[136],"via":[139],"Cascading":[141],"Instruction":[142],"Influence":[143],"(CII)":[144],"model,":[145],"validated":[146],"against":[147],"behavioral":[148],"data":[149],"ten":[151],"production":[152],"LLMs.":[153],"Depth":[154],"increases":[155],"probability":[157],"nonlinearly;":[158],"blast":[159],"radius":[160],"plateaus":[161],"only":[162],"when":[163],"context":[164],"windows":[165],"saturate.":[166],"Two":[167],"mechanisms":[168],"drive":[169],"this.":[170],"Context":[171],"window":[172],"pollution":[173],"accumulates":[174],"tiers.":[176],"Privilege":[177],"boundaries":[178],"erode":[179],"chains.":[182],"Sandboxed":[183],"mitigations":[184],"reduced":[185],"success":[187],"23.4%,":[189],"significant,":[190],"yet":[191],"clearly":[192],"insufficient.":[193],"assumption":[195],"enhances":[198],"contradicted":[201],"these":[203],"results.":[204],"mapped":[206],"vulnerabilities":[207],"EU":[209],"Cyber":[210],"Resilience":[211],"Act":[212],"requirements.":[213],"Architectural":[214],"redesign,":[215],"incremental":[217],"patching,":[218],"appears":[219],"necessary.":[220]},"counts_by_year":[],"updated_date":"2026-11-11T12:16:26.678958","created_date":"2026-04-14T00:00:00"}