Cover Image

Zero-Permission Manipulation: Can We Trust Large Multimodal Model Powered GUI Agents?

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Qian, Yi, Qian, Kunwei, He, Xingbang, Chen, Ligeng, Zhang, Jikang, Zhang, Tiantai, Wei, Haiyang, Wang, Linzhang, Wu, Hao, Mao, Bing
Format:	Preprint
Published:	2026
Subjects:	Cryptography and Security Artificial Intelligence Software Engineering
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

Discovering 100+ Compiler Defects in 72 Hours via LLM-Driven Semantic Logic Recomposition
by: He, Xingbang, et al.
Published: (2026)

When "Correct" Is Not Safe: Can We Trust Functionally Correct Patches Generated by Code Agents?
by: Peng, Yibo, et al.
Published: (2025)

Identifying Adversary Tactics and Techniques in Malware Binaries with an LLM Agent
by: Xuan, Zhou, et al.
Published: (2026)

Unleashing the Power of LLM to Infer State Machine from the Protocol Implementation
by: Wei, Haiyang, et al.
Published: (2024)

LLM-Powered Detection of Price Manipulation in DeFi
by: Liu, Lu, et al.
Published: (2025)

Intent-Aware Authorization for Zero Trust CI/CD
by: Avirneni, Surya Teja
Published: (2025)

An Empirical Analysis of EOS Blockchain: Architecture, Contract, and Security
by: Liu, Haiyang, et al.
Published: (2025)

Identity Control Plane: The Unifying Layer for Zero Trust Infrastructure
by: Avirneni, Surya Teja
Published: (2025)

Clawed and Dangerous: Can We Trust Open Agentic Systems?
by: Chen, Shiping, et al.
Published: (2026)

Clawdrain: Exploiting Tool-Calling Chains for Stealthy Token Exhaustion in OpenClaw Agents
by: Dong, Ben, et al.
Published: (2026)

Towards Trust Proof for Secure Confidential Virtual Machines
by: Mao, Jingkai, et al.
Published: (2024)

LLM Agents for Automated Web Vulnerability Reproduction: Are We There Yet?
by: Liu, Bin, et al.
Published: (2025)

Establishing Workload Identity for Zero Trust CI/CD: From Secrets to SPIFFE-Based Authentication
by: Avirneni, Surya Teja
Published: (2025)

OTA-Key: Over the Air Key Management for Flexible and Reliable IoT Device Provision
by: Zhang, Qian, et al.
Published: (2024)

zkCraft: Prompt-Guided LLM as a Zero-Shot Mutation Pattern Oracle for TCCT-Powered ZK Fuzzing
by: Fu, Rong, et al.
Published: (2026)

Enhancing GUI Exploration Coverage of Android Apps with Deep Link-Integrated Monkey
by: Hu, Han, et al.
Published: (2024)

SoK: Web3 RegTech for Cryptocurrency VASP AML/CFT Compliance
by: Mao, Qian'ang, et al.
Published: (2025)

An Investigation of Patch Porting Practices of the Linux Kernel Ecosystem
by: Li, Xingyu, et al.
Published: (2024)

Characterizing Trust Boundary Vulnerabilities in TEE Containers: An Empirical Study
by: Liu, Weijie, et al.
Published: (2025)

How Far Have We Gone in Binary Code Understanding Using Large Language Models
by: Shang, Xiuwei, et al.
Published: (2024)

What You Trust Is Insecure: Demystifying How Developers (Mis)Use Trusted Execution Environments in Practice
by: Niu, Yuqing, et al.
Published: (2025)

The Data Enclave Advantage: A New Paradigm for Least-Privileged Data Access in a Zero-Trust World
by: Bistolfi, Nico, et al.
Published: (2025)

Measuring the Permission Gate: A Stress-Test Evaluation of Claude Code's Auto Mode
by: Ji, Zimo, et al.
Published: (2026)

ZTaint-Havoc: From Havoc Mode to Zero-Execution Fuzzing-Driven Taint Inference
by: Xie, Yuchong, et al.
Published: (2025)

PowerPeeler: A Precise and General Dynamic Deobfuscation Method for PowerShell Scripts
by: Li, Ruijie, et al.
Published: (2024)

FuzzAgent: Multi-Agent System for Evolutionary Library Fuzzing
by: Lyu, Yunlong, et al.
Published: (2026)

PackMonitor: Enabling Zero Package Hallucinations Through Decoding-Time Monitoring
by: Liu, Xiting, et al.
Published: (2026)

Who Tests the Testers? Systematic Enumeration and Coverage Audit of LLM Agent Tool Call Safety
by: Chen, Xuan, et al.
Published: (2026)

Game Rewards Vulnerabilities: Software Vulnerability Detection with Zero-Sum Game and Prototype Learning
by: Wen, Xin-Cheng, et al.
Published: (2024)

SkillProbe: Security Auditing for Emerging Agent Skill Marketplaces via Multi-Agent Collaboration
by: Guo, Zihan, et al.
Published: (2026)

Using LLMs for Security Advisory Investigations: How Far Are We?
by: Abdullah, Bayu Fedra, et al.
Published: (2025)

How Can ChatGPT Support Human Security Testers to Help Mitigate Supply Chain Attacks?
by: Zhang, Ying, et al.
Published: (2023)

Tactics, Techniques, and Procedures (TTPs) in Interpreted Malware: A Zero-Shot Generation with Large Language Models
by: Zhang, Ying, et al.
Published: (2024)

Automatically Detecting Checked-In Secrets in Android Apps: How Far Are We?
by: Li, Kevin, et al.
Published: (2024)

What Makes a Good LLM Agent for Real-world Penetration Testing?
by: Deng, Gelei, et al.
Published: (2026)

LLMs as Firmware Experts: A Runtime-Grown Tree-of-Agents Framework
by: Zhang, Xiangrui, et al.
Published: (2025)

Trusting code in the wild: Exploring contributor reputation measures to review dependencies in the Rust ecosystem
by: Hamer, Sivana, et al.
Published: (2024)

SABER: Benchmarking Operational Safety of LLM Coding Agents in Stateful Project Workspaces
by: Hu, Qi, et al.
Published: (2026)

AgentGuard: A Multi-Agent Framework for Robust Package Confusion Detection via Hybrid Search and Metadata-Content Fusion
by: Li, Yu, et al.
Published: (2026)

VulInstruct: Teaching LLMs Root-Cause Reasoning for Vulnerability Detection via Security Specifications
by: Zhu, Hao, et al.
Published: (2025)