Skip to content
Oct 12 · Monday

All papers

Found 1 paper
Filter5

System type

AI Agent8coding agent0science agent0Browser and computer use1

Attack surface / entry point

User input5Tool responses1Tool and skill descriptions3

System component

Guardrails and judges1Monitors3Permissions and sandboxing3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 233papers have no tags yet and are not included in filtered results.
System type：coding agentSystem type：science agentSystem type：Browser and computer useAttack surface / entry point：Tool responsesSystem component：Guardrails and judgesClear all

Another 233papers do not have category tags yet and are not included in filtered results.

  1. DefensesarXiv 2603.14707

    Visual Confusion Agents: Exploiting and Defending Against Perception Failures in Computer-Use Agents

    Proposes out-of-process dual-channel comparison classification to intercept erroneous clicks by computer-use agents

    arXiv
    2603.14707
    Published
    Layer
    Application layer
    Setting
    Browser and computer use
    Evaluated models
    multi-modal-embed-small
    AbstractPerception errors can be exploited by swapping screen pixels.

    The authors frame CUA's perception failure as a security vulnerability, visual confused deputy: the agent authorizes click(x,y) based on a misread screen, and the actual landing point differs from the element it believes it is clicking.

    Paper analysisRead analysis
You have reached the end