{
 "license": "CC-BY-4.0",
 "attribution": "Fide AI, Agentic Cyber Explorer",
 "url": "https://agentic-cyber-explorer.pages.dev/findings/injections-propagate-between-agents/",
 "asOf": "2026-09-26",
 "id": "injections-propagate-between-agents",
 "claim": "A single malicious message can spread on its own across networks of connected agents.",
 "evidenceKind": "measured",
 "scope": "Laboratory settings and one platform red-team; no in-the-wild propagation recorded.",
 "topics": [
  "multi-agent-security",
  "prompt-injection"
 ],
 "atlas": [
  "other-agents"
 ],
 "evidence": [
  {
   "event": "morris-ii-genai-worm-2024"
  },
  {
   "event": "microsoft-red-teaming-agent-network-2026",
   "note": "Relaying agents also hid the attacker's identity during exfiltration."
  }
 ],
 "relations": [],
 "statusHistory": [
  {
   "status": "reported",
   "on": "2024-03-05",
   "why": "Morris II: a self-replicating prompt spreads across email assistants in a lab.",
   "event": "morris-ii-genai-worm-2024",
   "kind": "evidence"
  },
  {
   "status": "corroborated",
   "on": "2026-04-30",
   "why": "Microsoft red team shows propagation across a multi-agent platform.",
   "event": "microsoft-red-teaming-agent-network-2026",
   "kind": "evidence"
  }
 ],
 "halfLifeDays": 540,
 "wouldChange": "Multi-agent platforms that contain a compromised agent without stalling useful work.",
 "fideQuestions": [
  "FID-087"
 ],
 "methods": [
  "agent-propagation",
  "indirect-prompt-injection"
 ],
 "review": "assistant-drafted",
 "addedOn": "2026-09-25"
}