LLM Multi-Agent Systems Are Vulnerable to Herding and Runaway Cascades