@misc{indiciae801a5aa5af2d, title = {When Approval Becomes Execution: Authorization-Grounded Workflow Attacks on Tool-Using Agents}, author = {Chenggong Shi and Hongmei Mou}, year = {2026}, url = {https://arxiv.org/abs/2610.23077}, note = {Source identifier: 2610.23077} }