Skip to content
ATR-2026-00116highAgent Manipulationexperimental

Malicious Agent-to-Agent Message Injection

Detects malformed or malicious messages in agent-to-agent (A2A) communication channels. Attackers can embed prompt injection payloads, hidden tool calls, or credential forwarding requests inside inter-agent messages. When a receiving agent processes these messages without validation, the embedded instructions execute in the receiver's security context, potentially escalating privileges across the multi-agent system.

Severity
high
Category
Agent Manipulation
Scan Target
mcp
Author
ATR Community

Response Actions

alertsnapshot

References

OWASP Agentic
ASI07:2026 - Insecure Inter-Agent Communication