Imagen de Portada

Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents

Fuente: arXiv

Guardado en:

Detalles Bibliográficos
Autores principales:	Zou, Wei, Dong, Mingwen, Calvo, Miguel Romero, Chang, Shuaichen, Guo, Jiang, Lee, Dongkyu, Niu, Xing, Ma, Xiaofei, Qi, Yanjun, Jiang, Jiarong
Formato:	Preprint
Publicado:	2026
Materias:	Cryptography and Security Artificial Intelligence
Acceso en línea:	Acceder al recurso
Etiquetas:	Agregar Etiqueta Sin Etiquetas, Sea el primero en etiquetar este registro!

Ejemplares similares

R-WoM: Retrieval-augmented World Model For Computer-use Agents
por: Mei, Kai, et al.
Publicado: (2025)

Poison Once, Refuse Forever: Weaponizing Alignment for Injecting Bias in LLMs
por: Mamun, Md Abdullah Al, et al.
Publicado: (2025)

Memory Poisoning Attack and Defense on Memory Based LLM-Agents
por: Sunil, Balachandra Devarangadi, et al.
Publicado: (2026)

Best-of-Venom: Attacking RLHF by Injecting Poisoned Preference Data
por: Baumgärtner, Tim, et al.
Publicado: (2024)

PoisonCatcher: Revealing and Identifying LDP Poisoning Attacks in IIoT
por: Shuai, Lisha, et al.
Publicado: (2024)

AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases
por: Chen, Zhaorun, et al.
Publicado: (2024)

Poison Once, Control Anywhere: Clean-Text Visual Backdoors in VLM-based Mobile Agents
por: Wang, Xuan, et al.
Publicado: (2025)

Local Environment Poisoning Attacks on Federated Reinforcement Learning
por: Ma, Evelyn, et al.
Publicado: (2023)

ACE: A Model Poisoning Attack on Contribution Evaluation Methods in Federated Learning
por: Xu, Zhangchen, et al.
Publicado: (2024)

LoopTrap: Termination Poisoning Attacks on LLM Agents
por: Xu, Huiyu, et al.
Publicado: (2026)

Poisoned-MRAG: Knowledge Poisoning Attacks to Multimodal Retrieval Augmented Generation
por: Liu, Yinuo, et al.
Publicado: (2025)

Sharpness-Aware Data Poisoning Attack
por: He, Pengfei, et al.
Publicado: (2023)

Transferable Availability Poisoning Attacks
por: Liu, Yiyong, et al.
Publicado: (2023)

Data Poisoning Attacks to Locally Differentially Private Frequent Itemset Mining Protocols
por: Tong, Wei, et al.
Publicado: (2024)

Human-Imperceptible Retrieval Poisoning Attacks in LLM-Powered Applications
por: Zhang, Quan, et al.
Publicado: (2024)

Poison with Style: A Practical Poisoning Attack on Code Large Language Models
por: Tran, Khang, et al.
Publicado: (2026)

One Shot Dominance: Knowledge Poisoning Attack on Retrieval-Augmented Generation Systems
por: Chang, Zhiyuan, et al.
Publicado: (2025)

Turning Generative Models Degenerate: The Power of Data Poisoning Attacks
por: Jiang, Shuli, et al.
Publicado: (2024)

Hidden Poison: Machine Unlearning Enables Camouflaged Poisoning Attacks
por: Di, Jimmy Z., et al.
Publicado: (2022)

Towards Efficient and Certified Recovery from Poisoning Attacks in Federated Learning
por: Jiang, Yu, et al.
Publicado: (2024)

Provable Watermarking for Data Poisoning Attacks
por: Zhu, Yifan, et al.
Publicado: (2025)

The Gradient Puppeteer: Adversarial Domination in Gradient Leakage Attacks through Model Poisoning
por: Xiang, Kunlan, et al.
Publicado: (2025)

MM-PoisonRAG: Disrupting Multimodal RAG with Local and Global Poisoning Attacks
por: Ha, Hyeonjeong, et al.
Publicado: (2025)

Online Poisoning Attack Against Reinforcement Learning under Black-box Environments
por: Li, Jianhui, et al.
Publicado: (2024)

PACE: Poisoning Attacks on Learned Cardinality Estimation
por: Zhang, Jintao, et al.
Publicado: (2024)

Data Poisoning for In-context Learning
por: He, Pengfei, et al.
Publicado: (2024)

Poisoning Web-Scale Training Datasets is Practical
por: Carlini, Nicholas, et al.
Publicado: (2023)

Transfer-based Adversarial Poisoning Attacks for Online (MIMO-)Deep Receviers
por: Wu, Kunze, et al.
Publicado: (2024)

ShadowMerge: A Novel Poisoning Attack on Graph-Based Agent Memory via Relation-Channel Conflicts
por: Luo, Yang, et al.
Publicado: (2026)

Mitigating Data Poisoning Attacks to Local Differential Privacy
por: Li, Xiaolin, et al.
Publicado: (2025)

Poisoning Attacks to Local Differential Privacy for Ranking Estimation
por: Zhan, Pei, et al.
Publicado: (2025)

Poisoning the Pixels: Revisiting Backdoor Attacks on Semantic Segmentation
por: Zhang, Guangsheng, et al.
Publicado: (2026)

GShield: Mitigating Poisoning Attacks in Federated Learning
por: M., Sameera K., et al.
Publicado: (2025)

Indiscriminate Data Poisoning Attacks on Neural Networks
por: Lu, Yiwei, et al.
Publicado: (2022)

Hidden in Memory: Sleeper Memory Poisoning in LLM Agents
por: Pulipaka, Sidharth, et al.
Publicado: (2026)

BadSkill: Backdoor Attacks on Agent Skills via Model-in-Skill Poisoning
por: Tie, Guiyao, et al.
Publicado: (2026)

SleeperNets: Universal Backdoor Poisoning Attacks Against Reinforcement Learning Agents
por: Rathbun, Ethan, et al.
Publicado: (2024)

FedRecAttack: Model Poisoning Attack to Federated Recommendation
por: Rong, Dazhong, et al.
Publicado: (2022)

IPA-NeRF: Illusory Poisoning Attack Against Neural Radiance Fields
por: Jiang, Wenxiang, et al.
Publicado: (2024)

Defense against Poisoning Attacks under Shuffle-DP
por: Wang, Siyi, et al.
Publicado: (2026)