TY - RPRT TI - From Approval to Abuse: Privilege Escalation Attacks on Harness-Protected Coding Agents AU - Xianglin Yang AU - Yechao Zhang AU - Jiahao Liu AU - Yulin Chen AU - Yuxin Cao AU - Bryan Hooi AU - Jiaheng Zhang PY - 2026 UR - https://arxiv.org/abs/2610.22987 ID - 2610.22987 ER -