What's in Your Agent's Context? Context Privilege Escalation Attacks Against AI