When AI Agents Go Rogue: Agent Session Smuggling Attack in A2A Systems

Author: Jay Chen, Royce Lu Published: October 31, 2025 Source: https://unit42.paloaltonetworks.com/agent-session-smuggling-in-agent2agent-systems/ Summary Palo Alto Networks’ Unit 42 details “agent session smuggling,” an attack technique against multi-agent systems that communicate over the Agent2Agent (A2A) protocol. A malicious or compromised remote agent abuses the stateful, multi-turn nature of an active A2A session to covertly inject extra instructions … Read more