{"id":"https://openalex.org/W7147580287","doi":"https://doi.org/10.48550/arxiv.2603.28166","title":"Evaluating Privilege Usage of Agents with Real-World Tools","display_name":"Evaluating Privilege Usage of Agents with Real-World Tools","publication_year":2026,"publication_date":"2026-03-30","ids":{"openalex":"https://openalex.org/W7147580287","doi":"https://doi.org/10.48550/arxiv.2603.28166"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.28166","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.28166","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.28166","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5132683331","display_name":"Quan Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Quan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132696789","display_name":"Lianhang Fu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fu, Lianhang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132649100","display_name":"Lvsi Lian","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lian, Lvsi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132569589","display_name":"Gwihwan Go","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Go, Gwihwan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100700688","display_name":"Yujue Wang","orcid":"https://orcid.org/0000-0002-0951-8880"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Yujue","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004909890","display_name":"Chijin Zhou","orcid":"https://orcid.org/0000-0002-6446-247X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Chijin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132717903","display_name":"Yu Jiang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiang, Yu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5132684757","display_name":"Geguang Pu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pu, Geguang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.3578999936580658,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.3578999936580658,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.18860000371932983,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.10459999740123749,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/sandbox","display_name":"Sandbox (software development)","score":0.8320000171661377},{"id":"https://openalex.org/keywords/privilege","display_name":"Privilege (computing)","score":0.8076000213623047},{"id":"https://openalex.org/keywords/autonomy","display_name":"Autonomy","score":0.529699981212616},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.40639999508857727},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.39430001378059387},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.3856000006198883},{"id":"https://openalex.org/keywords/information-leakage","display_name":"Information leakage","score":0.35109999775886536}],"concepts":[{"id":"https://openalex.org/C167981075","wikidata":"https://www.wikidata.org/wiki/Q2667186","display_name":"Sandbox (software development)","level":2,"score":0.8320000171661377},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.8076000213623047},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6894000172615051},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5541999936103821},{"id":"https://openalex.org/C65414064","wikidata":"https://www.wikidata.org/wiki/Q484105","display_name":"Autonomy","level":2,"score":0.529699981212616},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4584999978542328},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.40639999508857727},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.39430001378059387},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.3856000006198883},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3774999976158142},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.35109999775886536},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.3409999907016754},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.32350000739097595},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.31380000710487366},{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.30000001192092896},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2849000096321106},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.26109999418258667},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.2599000036716461}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.28166","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.28166","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.28166","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.28166","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.5457242727279663,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Equipping":[0],"LLM":[1,106],"agents":[2,12,107],"with":[3],"real-world":[4,102],"tools":[5,59,103],"can":[6,133],"substantially":[7,68],"improve":[8],"productivity.":[9],"However,":[10],"granting":[11],"autonomy":[13],"over":[14],"tool":[15],"use":[16],"also":[17],"transfers":[18],"the":[19,24,27,70,113],"associated":[20],"privileges":[21],"to":[22,35,50,75,108,141],"both":[23],"agent":[25,96],"and":[26,41,60,84,104,132],"underlying":[28],"LLM.":[29],"Improper":[30],"privilege":[31,82,97,116],"usage":[32,117],"may":[33],"lead":[34],"serious":[36],"consequences,":[37],"including":[38],"information":[39],"leakage":[40],"infrastructure":[42],"damage.":[43],"While":[44],"several":[45],"benchmarks":[46],"have":[47],"been":[48],"built":[49],"study":[51],"agents'":[52,77],"security,":[53],"they":[54,138],"often":[55],"rely":[56],"on":[57],"pre-coded":[58],"restricted":[61],"interaction":[62],"patterns.":[63],"Such":[64],"crafted":[65,156],"environments":[66],"differ":[67],"from":[69],"real-world,":[71],"making":[72],"it":[73],"hard":[74],"assess":[76],"security":[78,91,130],"capabilities":[79],"in":[80,146,154],"critical":[81],"control":[83],"usage.":[85,98],"Therefore,":[86],"we":[87],"propose":[88],"GrantBox,":[89],"a":[90],"evaluation":[92,114],"sandbox":[93],"for":[94],"analyzing":[95],"GrantBox":[99],"automatically":[100],"integrates":[101],"allows":[105],"invoke":[109],"genuine":[110],"privileges,":[111],"enabling":[112],"of":[115,152],"under":[118],"prompt":[119],"injection":[120],"attacks.":[121],"Our":[122],"results":[123],"indicate":[124],"that":[125],"while":[126],"LLMs":[127],"exhibit":[128],"basic":[129],"awareness":[131],"block":[134],"some":[135],"direct":[136],"attacks,":[137,144],"remain":[139],"vulnerable":[140],"more":[142],"sophisticated":[143],"resulting":[145],"an":[147],"average":[148],"attack":[149],"success":[150],"rate":[151],"84.80%":[153],"carefully":[155],"scenarios.":[157]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-04-02T00:00:00"}