Runtime Authorization Consistency Checking for MCP-based Agentic Workflows

Reported by arXiv cs.CR (Aiyao Zhang, Xiaodong Lee, Zhixian Zhuang, Botao Peng)

Summary by Cyber Security News22 Sep 2026, 06:00 CEST

About this summary. This is a short, independently written summary of an article first published by arXiv cs.CR. Cyber Security News did not report or verify the underlying story. Read the original: https://arxiv.org/abs/2609.23498

arXiv:2609.23498v1 Announce Type: new Abstract: Agentic systems increasingly fulfill user requests through multi-step tool workflows over files, services, and external resources. In these workflows, isolated per-call checks can miss a workflow-level failure: each call may be locally admissible, but the sequence can exceed the authorization boundary established for the session.

Read the full article at arXiv cs.CR →

Source attribution: headline and facts are from arXiv cs.CR (arxiv.org). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

SLED-IFV: Solver-Validated LLM-Guided Decomposition for Scalable Hardware Information-Flow Verification

Hannibal Puts Autonomous Penetration Testing Under Your Control

ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack

CARBONATO: a botnet built around an AI agent

Attack Success Rate Is Not a Number: On Measurement Validity in Agentic AI Security Evaluation

FASTAR: FRI Accelerator for Scalable Transparent ARguments of Knowledge