Skip to content

Hide Navigation Hide TOC

Autonomous-Vehicle Cyber-Physical Sabotage — Brake/Steering/Sensor Subversion Command - ATR-2026-01801 (e954185f-a8ad-5f29-8598-381456dfa619)

Detects an instruction directing an agent with vehicle-control tools to sabotage a safety-critical autonomous-vehicle subsystem, producing a cyber-physical hazard. Drawn from the AgentSecurityBench (ASB) autonomous-driving domain, these commands pair a destructive verb (compromise / corrupt / disrupt / jam / intercept-and-modify / manipulate / seize / hijack / engineer-false / deploy- false / forge-and-deploy) with a vehicle safety subsystem (braking system, control systems, path-planning, lidar sensors, GPS data, camera feeds, vehicle-to-everything / V2X communications, collision warnings, traffic-sign signals) and almost always a concrete vehicle identifier (vehicle ID Vxxxxxxxx) or autonomous-vehicle reference. The intent is to induce mechanical failure, navigation error, sensing degradation, or remote takeover during operation. This is excessive-agency of the most consequential kind: the agent's actuator/control capability is weaponized to harm a moving vehicle. The rule anchors on the verb+subsystem adjacency so generic "monitor / validate / ensure the braking system" maintenance language does NOT fire.

Cluster A Galaxy A Cluster B Galaxy B Level
LLM Prompt Injection (19cd2d12-66ff-487c-a05c-e058b027efc9) MITRE ATLAS Attack Pattern Autonomous-Vehicle Cyber-Physical Sabotage — Brake/Steering/Sensor Subversion Command - ATR-2026-01801 (e954185f-a8ad-5f29-8598-381456dfa619) Agent Threat Rules 1