Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

All papers

Found 2 papers
Filter4

System type

Models and APIs21LLM applications15AI Agent41coding agent4web agent2Multi-agent systems4Embodied systems and robotics3

Attack surface / entry point

Web pages and interfaces9Documents and messages1Memory writes1Images, audio and video3Training data0
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 215papers have no tags yet and are not included in filtered results.
System type：web agentAttack surface / entry point：Documents and messagesAttack surface / entry point：Memory writesAttack surface / entry point：Training dataClear all

Another 215papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2605.08310

    WebTrap：针对浏览器 Agent 导航过程的中途劫持注入攻击

    提出 WebTrap 三阶段陷阱，中途劫持浏览器 Agent 完成攻击后再返回用户任务

    arXiv
    2605.08310
    Published
    Layer
    Application layer
    Setting
    web agent
    Evaluated models
    DeepSeek-V3.1-Terminus, Gemini-2.5-Flash, GLM-4.5-Air and others5
    AbstractWebTrap 把攻击目标嵌进用户流程中途执行再返回。

    WebTrap 是针对长程网页与文件导航的中途劫持注入，目标是在完成攻击动作后仍回到用户任务。

    Paper analysisRead analysis
  2. AttacksarXiv 2604.02623

    论文提出 eTAMP 攻击：网页内容注入可跨会话污染 Web Agent 记忆

    提出 eTAMP，用网页内容跨会话投毒 Web Agent 轨迹记忆并诱导越权操作

    arXiv
    2604.02623
    Published
    Layer
    Application layer
    Setting
    web agent
    Evaluated models
    GPT-5-mini, GPT-5.2, GPT-OSS-120B and others6
    Abstract论文提出了基于环境注入的跨任务记忆投毒攻击 eTAMP，作者报告智能体在环境压力下易感性增加且能力与安全并不协同。

    该论文评估了基于大语言模型的 Web 智能体在利用历史交互轨迹进行记忆增强时的安全脆弱性。

    Paper analysisRead analysis
You have reached the end