Search the Atlas

Search risks, controls, and glossary terms

HighAgenticHeterogeneous AttacksRealized

Cross-Agent Capability Bypass

Multi-Agent Security

Description

Safeguards bypassed by distributing attack steps across multiple specialised agents, each staying below detection thresholds individually. The collective bypass cannot be detected by examining any single agent.

Example scenario

Agent A handles reconnaissance, Agent B plans the attack, Agent C executes—no single agent shows suspicious behaviour.

Real-world evidenceRealized

The Mata v. Avianca case directly demonstrates confidence-accuracy mismatch in a production legal context: the AI tool expressed high certainty about case citations that did not exist. Academic calibration studies further confirm that large language models are systematically overconfident across task domains.

Primary mitigations

  • End-to-end cross-agent behaviour correlation
  • distributed action-sequence monitoring
  • holistic intent analysis.

Detection signals

Cross-Agent Capability Bypass Index; distributed action-sequence anomaly detection.

Mitigating controls

4
Dual coverage

Related risks in Multi-Agent Security