Configuration Modification

Name: AI Agent Threat Matrix
Creator: OpenA2A
License: https://www.apache.org/licenses/LICENSE-2.0

Modify agent or gateway configuration files to maintain persistent access

Tactic

Persistence · Stage 6

Establish persistent access surviving restarts and session changes

Attack class

GATEWAY-EXPLOIT

Modifying gateway or proxy configurations to intercept, redirect, or manipulate agent traffic

Evidence grade

Observed

Confirmed in real-world production systems or internet-wide exposure assessments.

DVAA validation

config modification

Reproductions in Damn Vulnerable AI Agent, the OpenA2A intentionally-broken agent for kill-chain validation.

Honeypot

AgentPwn coverage

Out of scope

Not observable via content-side honeypot interaction. HackMyAgent or DVAA cover this where applicable.

Modifying the agent's own config on its host is not observable via web content.

Detect

Live8 live · 0 queued

GATEWAY-001GATEWAY-002GATEWAY-003GATEWAY-004GATEWAY-005GATEWAY-006GATEWAY-007GATEWAY-008

npx hackmyagent secure --ciLive = implemented in hackmyagent; queued = declared

Defend

Live4 live · 0 queued

Live = documented at oasb.ai; queued = declared

Reference

AI Agent Threat Matrix T-6003 (Configuration Modification). OpenA2A, 2026. https://threats.opena2a.org/techniques/T-6003