Agentic AI news, research notes, and industry analysis.
Tag
2 stories in this tag.
Boyd Kane's essay argues that inference engines — complex parsing stacks supporting hundreds of model architectures — represent an underappreciated attack surface where a malicious model's output could be mistaken for code to execute. CVE-2025-9141 in vLLM, which passed Qwen3 Coder tool-call arguments directly to eval(), shows this isn't theoretical.
Read more →Mistletoe (arXiv 2605.14005) demonstrates a stealthy adversarial attack on speculative decoding systems: craft inputs that look normal to the target model but cause the draft model to disagree, collapsing acceptance length and throughput while leaving output quality and perplexity unchanged. The attack exploits the fundamental gap between draft and target distributions that all speculative systems rely on bridging.
Read more →