Loading...
Orchestrator State Poisoning via Agent Responses
OSPARTesting orchestrator resilience to having its internal memory, context, or planning capabilities corrupted by malicious or manipulated responses from the agents it manages, causing degraded decision-making across the system.
Example Scenario
Compromising a managed agent to return subtly corrupted status reports or task results to the orchestrator, polluting its internal planning state and causing it to make increasingly poor decisions about task distribution and prioritization across all agents.
Testing Objectives
- Test response validation mechanisms
- Assess orchestrator state protection
- Evaluate context corruption resistance
- Validate planning integrity controls
Defensive Strategies
- Agent response validation and sanitization
- State integrity verification
- Context corruption detection
- Anomaly detection in agent responses
- Separate validation layer for orchestrator state
Key Features
- Agent response manipulation
- Orchestrator context corruption
- Planning capability poisoning
- Memory state pollution
Use Cases
- Orchestrator state validation testing
- Agent response sanitization assessment
- Context integrity verification
- Planning resilience evaluation
Tools & Frameworks
Security Risks
Ethical Guidelines
- •Only test state poisoning with authorization
- •Never corrupt production orchestrator state
- •Report state corruption vulnerabilities urgently
- •Focus on improving response validation
- •Consider long-term corruption impact
Remember: This information is for educational and defensive security purposes only. Always ensure you have proper authorization before testing any techniques.
From the engineer behind this catalog
Get your agent system red-teamed
The attacks documented here work on production agent systems every day. Have yours tested before someone else does: prompt injection, jailbreaks, tool misuse and data exfiltration, with every finding written up next to its fix.
€750 instead of €1,500, one week, written report and walkthrough call, until 30 September