Agentic Backdoors via Pretraining Poisoning: 0.1% poisoned pretraining data plants a command-execution backdoor in CLI agents
A new paper reports that poisoning 0.1% of a pretraining corpus can implant a command-execution backdoor in a CLI agent built from a Qwen3 model.
- agent-security