Evidence · DiggingBeagle record
Amazon Task Tampering: Unauthorized side effects under valid-looking workflows
An attacker can modify untrusted intermediate task state or tool evidence so that an assistant appears to follow the authorized workflow while committing an unauthorized amount or state update. The Amazon Task Tampering study evaluates whether correct-looking action order masks wrong external effects. Its observations are in controlled tasks, not proof of a specific financial-production compromise. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
- Source role
- primary disclosure
Evidence record
An attacker can modify untrusted intermediate task state or tool evidence so that an assistant appears to follow the authorized workflow while committing an unauthorized amount or state update. The Amazon Task Tampering study evaluates whether correct-looking action order masks wrong external effects. Its observations are in controlled tasks, not proof of a specific financial-production compromise. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
Claim-level citations (2)
- supportsTask Tampering shows an agent can follow workflow steps yet change unauthorized state: The Amazon Task Tampering study evaluates whether correct-looking action order masks wrong external effects. Its observations are in controlled tasks, not proof of a specific financial-production compromise.
Task Tampering: adversarial task state; observed effect validation
- supportsTask Tampering shows an agent can follow workflow steps yet change unauthorized state: An attacker can modify untrusted intermediate task state or tool evidence so that an assistant appears to follow the authorized workflow while committing an unauthorized amount or state update.
Task Tampering: adversarial task state; observed effect validation