WebInject: Prompt Injection Attack to Web Agents
Introduces WebInject, a prompt-injection attack that optimizes rendered webpage pixels to make screenshot-based web agents take attacker-chosen actions.
AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.
What is this resource?
- Resource type
- Research paper
- Environment
- Web
- Topics
- Safety & security, Web navigation
- Record publication date
- 2025-05-16
- Evidence retrieved
- 2026-11-05
- Resource ID
- arxiv:2505.11717
Recorded paper version
Version updated: 2025-10-17T01:52:39Z.
This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.
Abstract fingerprint
989673e9cb9103f8c7a28a0b4d838bd83c6e5d87b7f5e44bdb6753d7f0c69a88Authors
Xilong Wang, John Bloch, Zedian Shao, Yuepeng Hu, Shuyan Zhou, Neil Zhenqiang Gong
Cite this paper
Download BibTeX · Download CSL JSON
Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.
Explore related topics
Scope and limitations
The annotation and scope were reviewed against the complete retained arXiv abstract (v4). Experiments, reported performance and artifact availability have not been independently reproduced.
Primary evidence and verification
Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.
- arxiv api
Retrieved 2026-10-16T06:36:54Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.
Content fingerprint
4953a8e0f029016aef668bce98cec4d2873a7ae49c1fe33c4311fa5eb8d24089 - editorial primary review
Retrieved 2026-11-05T23:01:45Z. Supports: name, kind, summary, environments, topics, scope, relations.
Content fingerprint
72d781966615fe4da127a9c089d5d6ab85838feb4205ef1ebd446ef97189bf70
Suggest a correction
Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.