@misc{indiciae3c3b6a7e3843,
  title = {PlanFlip: Attacking Multi-Agent LLM Systems via Planning-Phase Prompt Injection},
  author = {Yuhang Wang},
  year = {2026},
  url = {https://arxiv.org/abs/2607.16199},
  note = {Source identifier: 2607.16199}
}