MIT AI Risk Repository · Risk Sub-Category · 63.10.04

Vulnerable AI Agents

Category: Multi-Agent Security

Open the MIT Risk Navigator All entries from Hammond2025

Description

"Vulnerable AI Agents. The use of AI agents as delegates or representatives of humans or organisa- tions also introduces the possibility of attacks on AI agents themselves. In other words, agents can be considered vulnerable extensions of their principals, introducing a novel attack surface (SecureWorks, 2023). Attacks on an AI agent could be used to extract private information about their principal (Wei & Liu, 2024; Wu et al., 2024a), or to manipulate the agent to take actions that the principal would find undesirable (Zhang et al., 2024a). This includes attacks that have direct relevance for

From Multi-Agent Risks from Advanced AI (Hammond2025), as extracted by the MIT AI Risk Repository (CC BY 4.0).

Classification

Domain: 7. AI system safety, failures, & limitations
Subdomain: 7.6 Multi-agent risks
Causal entity: Other
Intent: Intentional
Timing: Post-deployment

Subdomain definition: Risks from multi-agent interactions, due to incentives (which can lead to conflict or collusion) and/or the structure of multi-agent systems, which can create cascading failures, selection pressures, new security vulnerabilities, and a lack of shared information and trust.

How other frameworks describe this risk

Groups of LLM-Agents May Show Emergent Functionality
Foundational Challenges in Assuring Alignment and Safety of Large Language Models (Anwar2024)
Foundationality May Cause Correlated Failures
Foundational Challenges in Assuring Alignment and Safety of Large Language Models (Anwar2024)
Multi-Agent Safety Is Not Assured by Single-Agent Safety
Foundational Challenges in Assuring Alignment and Safety of Large Language Models (Anwar2024)
Collusion between LLM-Agents
Foundational Challenges in Assuring Alignment and Safety of Large Language Models (Anwar2024)
Financial instability due to model homogeneity
Risk Sources and Risk Management Measures in Support of Standards for General-Purpose AI Systems (Gipiškis2024)
Multi-agent collaboration capability
Frontier AI Risk Management Framework (v1.0) (Tse2025)
Impact on Financial Stability
Frontier AI Risk Management Framework (v1.0) (Tse2025)
Multi-agent collusion propensity:
Frontier AI Risk Management Framework (v1.0) (Tse2025)

Other entries from Hammond2025

Miscoordination Risk Category · 7.6
Miscoordination Additional evidence
Incompatible strategies Risk Sub-Category · 7.6
Incompatible strategies Additional evidence
Credit Assignment Risk Sub-Category · 7.6
Limited Interactions Risk Sub-Category · 7.6
Conflict Risk Category · 7.6
Conflict Additional evidence
Conflict Additional evidence
Social Dilemmas Risk Sub-Category · 7.6
Military Domains Risk Sub-Category · 7.6
Coercion and Extortion Risk Sub-Category · 7.6