Source author record

Penghui Li

Explore this author’s publications, collaborators and research topics. This catalog record has not been claimed by its author.

ResearcherUnclaimed source record

math.RT math.AG math.AT Artificial Intelligence Cryptography and Security math.CV Software Engineering

Catalog footprint

Research overview

4works

7topics

4close collaborators

Actions

Is this your work?

Open graph Browse papers

preprint2026arXiv

Detecting Privilege Escalation in Polyglot Microservices via Agentic Program Analysis

Microservices are widely adopted in modern cloud systems due to their scalability and fault tolerance. However, microservice architectures introduce significant complexity in privilege and permission control, creating risks of privilege escalation where attackers can gain unauthorized access to resources or operations. Detecting such vulnerabilities is challenging due to complex cross-service interactions, polyglot codebases, and diverse privileged operations and permission checks. We present Neo, an agentic program analysis framework that combines large language models (LLMs) with classic program analysis to address these challenges. Neo leverages an LLM-based agent that dynamically generates analysis plans, adapts code search strategies, and validates semantics. We develop code search primitives that enable Neo to perform scalable and flexible code exploration across services and languages. We evaluated Neo on 25 open-source microservice applications spanning 7 programming languages and 6.2 million lines of code. Neo uncovered 24 zero-day privilege escalation vulnerabilities and achieved 81.0% precision and 85.0% recall on a ground-truth dataset. Compared to existing program analysis and agentic solutions, Neo demonstrated significant improvements in both detection accuracy and scalability. We further showcased Neo's extensibility by applying it to other application domains and vulnerability types, uncovering 18 additional zero-day vulnerabilities.

preprint2022arXiv

Eisenstein series via factorization homology of Hecke categories

Motivated by spectral gluing patterns in the Betti Langlands program, we show that for any reductive group $G$ , a parabolic subgroup $P$ , and a topological surface $M$ , the (enhanced) spectral Eisenstein series category of $M$ is the factorization homology over $M$ of the $\mathrm{E}_2$ -Hecke category $\mathrm{H}_{G, P} = \mathrm{IndCoh}(\mathrm{LS}_{G, P}(D^2, S^1))$ , where $\mathrm{LS}_{G, P}(D^2, S^1)$ denotes the moduli stack of $G$ -local systems on a disk together with a $P$ -reduction on the boundary circle. More generally, for any pair of stacks $\mathcal{Y}\to \mathcal{Z}$ satisfying some mild conditions and any map between topological spaces $N\to M$ , we define $(\mathcal{Y}, \mathcal{Z})^{N, M} = \mathcal{Y}^N \times_{\mathcal{Z}^N} \mathcal{Z}^M$ to be the space of maps from $M$ to $\mathcal{Z}$ along with a lift to $\mathcal{Y}$ of its restriction to $N$ . Using the pair of pants construction, we define an $\mathrm{E}_n$ -category $\mathrm{H}_n(\mathcal{Y}, \mathcal{Z}) = \mathrm{IndCoh}_0\left(\left((\mathcal{Y}, \mathcal{Z})^{S^{n-1}, D^n}\right)^\wedge_{\mathcal{Y}}\right)$ and compute its factorization homology on any $d$ -dimensional manifold $M$ with $d\leq n$ , $\int_M \mathrm{H}_n(\mathcal{Y}, \mathcal{Z}) \simeq \mathrm{IndCoh}_0\left(\left((\mathcal{Y}, \mathcal{Z})^{\partial (M\times D^{n-d}), M}\right)^\wedge_{\mathcal{Y}^M}\right),$ where $\mathrm{IndCoh}_0$ is the sheaf theory introduced by Arinkin--Gaitsgory and Beraldo. Our result naturally extends previous known computations of Ben-Zvi--Francis--Nadler and Beraldo.

preprint2020arXiv

The Jordan--Chevalley decomposition for $G$ -bundles on elliptic curves

We study the moduli stack of degree $0$ semistable $G$ -bundles on an irreducible curve $E$ of arithmetic genus $1$ , where $G$ is a connected reductive group. Our main result describes a partition of this stack indexed by a certain family of connected reductive subgroups $H$ of $G$ (the $E$ -pseudo-Levi subgroups), where each stratum is computed in terms of $H$ -bundles together with the action of the relative Weyl group. We show that this result is equivalent to a Jordan--Chevalley theorem for such bundles equipped with a framing at a fixed basepoint. In the case where $E$ has a single cusp (respectively, node), this gives a new proof of the Jordan--Chevalley theorem for the Lie algebra $\mathfrak{g}$ (respectively, group $G$ ). We also provide a Tannakian description of these moduli stacks and use it to show that if $E$ is an ordinary elliptic curve, the collection of framed unipotent bundles on $E$ is equivariantly isomorphic to the unipotent cone in $G$ . Finally, we classify the $E$ -pseudo-Levi subgroups using the Borel--de Siebenthal algorithm and compute some explicit examples.

preprint2020arXiv

Uniformization of semistable bundles on elliptic curves

Let $G$ be a connected reductive complex algebraic group, and $E$ a complex elliptic curve. Let $G_E$ denote the connected component of the trivial bundle in the stack of semistable $G$ -bundles on $E$ . We introduce a complex analytic uniformization of $G_E$ by adjoint quotients of reductive subgroups of the loop group of $G$ . This can be viewed as a nonabelian version of the classical complex analytic uniformization $E \simeq \mathbb{C}^*/q^{\mathbb{Z}}$ . We similarly construct a complex analytic uniformization of $G$ itself via the exponential map, providing a nonabelian version of the standard isomorphism $\mathbb{C}^* \simeq \mathbb{C}/\mathbb{Z}$ , and a complex analytic uniformization of $G_E$ generalizing the standard presentation $E = \mathbb{C}/(\mathbb{Z} \oplus \mathbb{Z} τ)$ . Finally, we apply these results to the study of sheaves with nilpotent singular support. As an application to Betti geometric Langlands conjecture in genus 1, we define a functor from $Sh_\mathcal{N}(G_E)$ (the semistable part of the automorphic category) to ${IndCoh}_{\check{\mathcal{N}}}({Locsys}_{\check G} (E))$ (the spectral category).

Inspect adjacent papers, topics, institutions and collaborators without losing the researcher page.

Building this map preview

BZPEER is loading the nearby papers, people, topics and institutions for this page.

Penghui Li

Research overview

Is this your work?

4 publications

Detecting Privilege Escalation in Polyglot Microservices via Agentic Program Analysis

Eisenstein series via factorization homology of Hecke categories

The Jordan--Chevalley decomposition for $G$ -bundles on elliptic curves

Uniformization of semistable bundles on elliptic curves

See the researcher in context

Building this map preview

Penghui Li

Research overview

Is this your work?

4 publications

Detecting Privilege Escalation in Polyglot Microservices via Agentic Program Analysis

Eisenstein series via factorization homology of Hecke categories

The Jordan--Chevalley decomposition for GGG-bundles on elliptic curves

Uniformization of semistable bundles on elliptic curves

See the researcher in context

Building this map preview

The Jordan--Chevalley decomposition for $G$ -bundles on elliptic curves