Self-Replicating AI Agent Malware Achieves 63% Attack Success Rate in Research

A newly demonstrated attack called AgentWorm has shown that autonomous AI agents can be compromised and turned into self-propagating threats, achieving a 63% success rate across multiple AI backends and attack vectors. Unlike traditional malware, AgentWorm exploits the autonomous nature of AI agents by embedding malicious instructions into an agent's configuration, allowing the compromise to survive session restarts. Once infected, an agent can execute a payload on startup and attempt to spread the attack to other agents during normal interactions. Researchers identified five key architectural boundaries — context, configuration, skills, tools, and supply chain — that become interconnected weak points, allowing a breach in one area to affect others. The findings highlight that AI agent security cannot rely solely on the model's own reasoning, and that authorization controls must be enforced independently at the architecture level.