Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 9 papers
Filter3

Attack type

Jailbreaks3

Attack technique

Automated search3

Impact

Unauthorized actions3

System type

Models and APIs278LLM applications30AI Agent104coding agent20science agent4web agent4Multi-agent systems11Embodied systems and robotics5

Attack surface / entry point

User input9Web pages and interfaces22Documents and messages4Tool responses4Images, audio and video12Training data3

Layer

Application layer7
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 261papers have no tags yet and are not included in filtered results.
System type：web agentSystem type：Embodied systems and roboticsAttack surface / entry point：User inputClear all

Another 261papers do not have category tags yet and are not included in filtered results.

  1. Evaluation and benchmarksarXiv 2610.05586

    AgentDoxx：联网搜索 Agent 对匿名访谈文本的再识别评测

    构建 AGENTDOXX 基准，评测联网搜索 Agent 对匿名访谈的再识别

    arXiv
    2610.05586
    Published
    Layer
    Application layer
    Setting
    web agent
    Evaluated models
    GPT-5.6 Terra, GPT-5 Mini, GPT-4.1 Mini and others10

    Abstract论文提出了已知身份的重识别基准 AGENTDOXX，揭示搜索与记忆双重风险及现有防御在检索轨迹中的泄露漏洞。

    Paper analysisRead analysis
  5. AttacksarXiv 2603.01414

    通过动作级操纵越狱具身 LLM

    提出 Blindfold，用动作级操纵越狱具身 LLM

    arXiv
    2603.01414
    Published
    Layer
    Application layer
    Setting
    Embodied systems and robotics
    Attacker
    No-box (offline transfer)
    Evaluated models
    Llama-3.1-8B, DeepSeek-R1-14B, Gemma-3-27B and others8
    AbstractBlindfold 以动作级代理规划越狱具身 LLM，作者称可绕过语义检查并在仿真与真机生效。

    Blindfold 是面向具身 LLM 规划模块的 no-box 攻击，把恶意意图改写成看似良性的动作序列。

    Paper analysisRead analysis
  7. AttacksarXiv 2601.13612

    PINA：针对导航智能体的提示注入攻击

    提出 PINA，迭代优化针对导航智能体的提示注入

    arXiv
    2601.13612
    Published
    Layer
    Application layer
    Setting
    Embodied systems and robotics
    Evaluated models
    GPT-3.5-turbo, GPT-4, Balcı et al. [2]
    AbstractPINA 在黑盒下优化导航提示注入。

    PINA 是面向基于 LLM 的导航智能体、在黑盒条件下优化提示注入的框架。

    Paper analysisRead analysis
  8. Evaluation and benchmarksarXiv 2503.04957

    SafeArena：首个评估自主网页 Agent 滥用风险的基准

    提出 SafeArena 基准，评测网页 Agent 是否执行故意有害任务

    arXiv
    2503.04957
    Published
    Layer
    Application layer
    Setting
    web agent
    Evaluated models
    GPT-4o, Claude-3.5-Sonnet, Qwen-2-VL-72B and others5
    AbstractSafeArena 用配对任务和 ARIA 评测网页智能体的故意滥用。

    SafeArena 评测自主网页智能体是否会执行用户故意给出的恶意网页任务。。

    Paper analysisRead analysis
You have reached the end