TY - RPRT TI - When Approval Becomes Execution: Authorization-Grounded Workflow Attacks on Tool-Using Agents AU - Chenggong Shi AU - Hongmei Mou PY - 2026 UR - https://arxiv.org/abs/2610.23077 ID - 2610.23077 ER -