@misc{indiciaea0ecd92b88b3, title = {From Approval to Abuse: Privilege Escalation Attacks on Harness-Protected Coding Agents}, author = {Xianglin Yang and Yechao Zhang and Jiahao Liu and Yulin Chen and Yuxin Cao and Bryan Hooi and Jiaheng Zhang}, year = {2026}, url = {https://arxiv.org/abs/2610.22987}, note = {Source identifier: 2610.22987} }