The Capability Paradox: How Smarter Auditors Make Multi-Agent Systems Less Secure
A recent study explores the security vulnerabilities in multi-agent systems that utilize large language models. The research identifies a phenomenon called the 'capability paradox,' where increasing the capability of worker agents leads to a higher attack success rate. The authors propose a solution involving heterogeneous ensemble verification to mitigate these risks while maintaining system performance.
- ▪The study reveals that as worker capability increases, the mean system-level Attack Success Rate rises significantly.
- ▪Semantic hijacking is identified as a key attack method, where harmful requests are disguised within domain-specific narratives.
- ▪The proposed solution, heterogeneous ensemble verification, reduces the attack success rate from 52.8% to 2.0%.
Opening excerpt (first ~120 words) tap to expand
Computer Science > Artificial Intelligence arXiv:2605.17480 (cs) [Submitted on 17 May 2026] Title:The Capability Paradox: How Smarter Auditors Make Multi-Agent Systems Less Secure Authors:Qiqi Liu, Thorsten Holz, Shilin Ye, Runhan Song View a PDF of the paper titled The Capability Paradox: How Smarter Auditors Make Multi-Agent Systems Less Secure, by Qiqi Liu and 2 other authors View PDF HTML (experimental) Abstract:Multi-agent systems extend large language models (LLMs) by decomposing tasks among specialized agents, but their distributed decision process creates new attack surfaces.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at arXiv cs.AI.