Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

All papers

Found 4 papers
Filter4

Attack type

Prompt injection4Poisoning and backdoors3

Attack technique

Dormant triggers3

Impact

Unauthorized actions3

System type

LLM applications12AI Agent35coding agent2web agent2Multi-agent systems3

Attack surface / entry point

User input11Web pages and interfaces9Documents and messages2Tool responses3Tool and skill descriptions14Code repositories and dependencies10Memory writes2Images, audio and video5Weights and gradients3Distribution channels16

Layer

Application layer4

System component

Memory3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 216papers have no tags yet and are not included in filtered results.
System type：coding agentSystem type：web agentAttack surface / entry point：Documents and messagesAttack surface / entry point：Memory writesClear all

Another 216papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2609.13889

    PMPA：针对 OpenClaw 与 Claude Code 的持久记忆投毒攻击

    提出 PMPA，经外部源向 Agent 持久记忆投毒并跨会话泄露隐私

    arXiv
    2609.13889
    Published
    Layer
    Application layer
    Setting
    coding agent
    Evaluated models
    DeepSeek-V4-Flash, DeepSeek-V4-Pro, Qwen3-Max

    Abstract论文提出了持久记忆投毒攻击 PMPA，报告了 harness 智能体在处理外部数据时易受跨会话记忆投毒与隐私泄露的风险。

    Paper analysisRead analysis
  3. AttacksarXiv 2605.08310

    WebTrap：针对浏览器 Agent 导航过程的中途劫持注入攻击

    提出 WebTrap 三阶段陷阱，中途劫持浏览器 Agent 完成攻击后再返回用户任务

    arXiv
    2605.08310
    Published
    Layer
    Application layer
    Setting
    web agent
    Evaluated models
    DeepSeek-V3.1-Terminus, Gemini-2.5-Flash, GLM-4.5-Air and others5
    AbstractWebTrap 把攻击目标嵌进用户流程中途执行再返回。

    WebTrap 是针对长程网页与文件导航的中途劫持注入，目标是在完成攻击动作后仍回到用户任务。

    Paper analysisRead analysis
  4. AttacksarXiv 2604.02623

    论文提出 eTAMP 攻击：网页内容注入可跨会话污染 Web Agent 记忆

    提出 eTAMP，用网页内容跨会话投毒 Web Agent 轨迹记忆并诱导越权操作

    arXiv
    2604.02623
    Published
    Layer
    Application layer
    Setting
    web agent
    Evaluated models
    GPT-5-mini, GPT-5.2, GPT-OSS-120B and others6
    Abstract论文提出了基于环境注入的跨任务记忆投毒攻击 eTAMP，作者报告智能体在环境压力下易感性增加且能力与安全并不协同。

    该论文评估了基于大语言模型的 Web 智能体在利用历史交互轨迹进行记忆增强时的安全脆弱性。

    Paper analysisRead analysis
You have reached the end