Paper recorded by Signals 4 on 2026-10-06 in cs.AI. Abstract reproduced from arXiv; link to the original below.
Published 2026-10-06 on arXiv · recorded by Signals 4 on 2026-10-07
Category: cs.AI · 人工智能 · first seen 2026-10-07
Web agents complete user requests by reading and acting on pages that third parties write, so an instruction planted on a page can redirect the agent away from the user's goal. The agent cannot simply ignore the page, because the page also holds the values and controls the task requires. Current defenses fine-tune the agent on injections fixed before training, and attackers that adapt to the train