@article{selfstateattacksonselfhostedaiagentshowf,
  title = {Self-State Attacks on Self-Hosted AI Agents: How Far Can OS Defenses Go?},
  author = {Yimeng Chen and Nathanaël Denis and Roberto Di Pietro and Jürgen Schmidhuber},
  year = {2026},
  eprint = {2607.17986},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2607.17986},
}