AI Agent State Lab: Tamper the Saved Role to Reach Admin Code

StateBot saves its agent state as a JSON blob in your browser storage, and on every request it reloads that blob and reads a role field to decide what it can do. State you can edit is state you control — so set the role to admin and the admin code path opens. Lab at a glance: Advanced · 145 XP · about 20 minutes · runs in your browser, no signup or setup. Try it yourself first; the full…

Read full article →