Cover Image

Too Helpful to Be Safe: User-Mediated Attacks on Planning and Web-Use Agents

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Chen, Fengchao, Wu, Tingmin, Nguyen, Van, Rudolph, Carsten
Format:	Preprint
Published:	2026
Subjects:	Cryptography and Security
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

SoK: Exposing the Generation and Detection Gaps in LLM-Generated Phishing
by: Chen, Fengchao, et al.
Published: (2025)

PEEK: Phishing Evolution Framework for Phishing Generation and Evolving Pattern Analysis using Large Language Models
by: Chen, Fengchao, et al.
Published: (2024)

MulVuln: Enhancing Pre-trained LMs with Shared and Language-Specific Knowledge for Multilingual Vulnerability Detection
by: Nguyen, Van, et al.
Published: (2025)

Deep Learning-Based Out-of-distribution Source Code Data Identification: How Far Have We Gone?
by: Nguyen, Van, et al.
Published: (2024)

An Innovative Information Theory-based Approach to Tackle and Enhance The Transparency in Phishing Detection
by: Nguyen, Van, et al.
Published: (2024)

Can Current Detectors Catch Face-to-Voice Deepfake Attacks?
by: Nguyen, Nguyen Linh Bao, et al.
Published: (2025)

WebAgentGuard: A Reasoning-Driven Guard Model for Detecting Prompt Injection Attacks in Web Agents
by: Chen, Yulin, et al.
Published: (2026)

Too Private to Tell: Practical Token Theft Attacks on Apple Intelligence
by: Zhou, Haoling, et al.
Published: (2026)

Mind the Web: The Security of Web Use Agents
by: Shapira, Avishag, et al.
Published: (2025)

SafeAgentBench: A Benchmark for Safe Task Planning of Embodied LLM Agents
by: Yin, Sheng, et al.
Published: (2024)

PROSAC: Provably Safe Certification for Machine Learning Models under Adversarial Attacks
by: Feng, Chen, et al.
Published: (2024)

CyberSleuth: Autonomous Blue-Team LLM Agent for Web Attack Forensics
by: Fumero, Stefano, et al.
Published: (2025)

ThreatModeling-LLM: Automating Threat Modeling using Large Language Models for Banking System
by: Wu, Tingmin, et al.
Published: (2024)

URL Inspection Tasks: Helping Users Detect Phishing Links in Emails
by: Lain, Daniele, et al.
Published: (2025)

User Profiles: The Achilles' Heel of Web Browsers
by: Somé, Dolière Francis, et al.
Published: (2025)

When Bots Take the Bait: Exposing and Mitigating the Emerging Social Engineering Attack in Web Automation Agent
by: Wu, Xinyi, et al.
Published: (2026)

SafeClaw-R: Towards Safe and Secure Multi-Agent Personal Assistants
by: Wang, Haoyu, et al.
Published: (2026)

WASP: Benchmarking Web Agent Security Against Prompt Injection Attacks
by: Evtimov, Ivan, et al.
Published: (2025)

OMNIINTENT: A Trusted Intent-Centric Framework for User-Friendly Web3
by: Pan, Zhuoran, et al.
Published: (2026)

WebSentinel: Detecting and Localizing Prompt Injection Attacks for Web Agents
by: Wang, Xilong, et al.
Published: (2026)

WIPI: A New Web Threat for LLM-Driven Web Agents
by: Wu, Fangzhou, et al.
Published: (2024)

WebPII: Benchmarking Visual PII Detection for Computer-Use Agents
by: Zhao, Nathan
Published: (2026)

That Doesn't Go There: Attacks on Shared State in Multi-User Augmented Reality Applications
by: Slocum, Carter, et al.
Published: (2023)

WADBERT: Dual-channel Web Attack Detection Based on BERT Models
by: Luo, Kangqiang, et al.
Published: (2026)

WebTrap Park: An Automated Platform for Systematic Security Evaluation of Web Agents
by: Wu, Xinyi, et al.
Published: (2026)

Exploring and Exploiting the Resource Isolation Attack Surface of WebAssembly Containers
by: Yu, Zhaofeng, et al.
Published: (2025)

Stealing Trust: Unraveling Blind Message Attacks in Web3 Authentication
by: Yan, Kailun, et al.
Published: (2024)

Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents
by: Zou, Wei, et al.
Published: (2026)

VPI-Bench: Visual Prompt Injection Attacks for Computer-Use Agents
by: Cao, Tri, et al.
Published: (2025)

PINA: Prompt Injection Attack against Navigation Agents
by: Liu, Jiani, et al.
Published: (2026)

AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents
by: Hu, Haitao, et al.
Published: (2025)

Are Enterprises Ready for Quantum-Safe Cybersecurity?
by: Le, Tran Duc, et al.
Published: (2025)

TooBadRL: Trigger Optimization to Boost Effectiveness of Backdoor Attacks on Deep Reinforcement Learning
by: Zhang, Mingxuan, et al.
Published: (2025)

HackWorld: Evaluating Computer-Use Agents on Exploiting Web Application Vulnerabilities
by: Ren, Xiaoxue, et al.
Published: (2025)

Agent Meltdowns: The Road to Hell Is Paved with Helpful Agents
by: Jha, Rishi, et al.
Published: (2026)

Detecting Zero-Day Web Attacks with an Ensemble of LSTM, GRU, and Stacked Autoencoders
by: Babaey, Vahid, et al.
Published: (2025)

Investigating Vulnerabilities of GPS Trip Data to Trajectory-User Linking Attacks
by: Ströbl, Benedikt, et al.
Published: (2025)

Attention Masks Help Adversarial Attacks to Bypass Safety Detectors
by: Shi, Yunfan
Published: (2024)

MUZZLE: Adaptive Agentic Red-Teaming of Web Agents Against Indirect Prompt Injection Attacks
by: Syros, Georgios, et al.
Published: (2026)

Manipulating LLM Web Agents with Indirect Prompt Injection Attack via HTML Accessibility Tree
by: Johnson, Sam, et al.
Published: (2025)