Research · curated 21 Jul 2026
Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go?
First reported arxiv.org
Coverage timeline
Single-source research — first reported, latest, and curated coincide.
Why it matters
Self-state attacks reveal a structural ceiling for OS-level defenses of self-hosted AI agents, pushing defenders toward application-layer integrity checks, canary entries, and signing of agent memory and configuration state.
A paper by Yimeng Chen, Nathanaël Denis, Roberto Di Pietro and Jürgen Schmidhuber formalizes 'self-state attacks,' in which a self-hosted AI agent is compromised by corruption of its own memory and configuration files via legitimate OS system calls. The authors characterize a four-axis attack space rendered as a 23-cell matrix with 43 concrete file operations, evaluate a layered OS-level defense against injected activity traces, and find that four attack cells (concentrated on memory-file writes) remain structurally indistinguishable at the OS level.