New: WebsiteBench. Can AI agents rebuild websites through browser exploration?WebsiteBench Star on GitHubStar
Research paper

WebInject: Prompt Injection Attack to Web Agents

Introduces WebInject, a prompt-injection attack that optimizes rendered webpage pixels to make screenshot-based web agents take attacker-chosen actions.

AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.

Original source ↗Read as MarkdownRecord JSON

What is this resource?

Resource type
Research paper
Environment
Web
Topics
Safety & security, Web navigation
Record publication date
2025-05-16
Evidence retrieved
2026-11-05
Resource ID
arxiv:2505.11717

Recorded paper version

arXiv v4

Version updated: 2025-10-17T01:52:39Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Abstract fingerprint989673e9cb9103f8c7a28a0b4d838bd83c6e5d87b7f5e44bdb6753d7f0c69a88

Authors

Xilong Wang, John Bloch, Zedian Shao, Yuepeng Hu, Shuyan Zhou, Neil Zhenqiang Gong

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Safety & securityWeb navigation

Scope and limitations

The annotation and scope were reviewed against the complete retained arXiv abstract (v4). Experiments, reported performance and artifact availability have not been independently reproduced.

Primary evidence and verification

Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.

  1. arxiv api

    Retrieved 2026-10-16T06:36:54Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

    Content fingerprint4953a8e0f029016aef668bce98cec4d2873a7ae49c1fe33c4311fa5eb8d24089
  2. editorial primary review

    Retrieved 2026-11-05T23:01:45Z. Supports: name, kind, summary, environments, topics, scope, relations.

    Content fingerprint72d781966615fe4da127a9c089d5d6ab85838feb4205ef1ebd446ef97189bf70

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.

Useful? Star Awesome CUA on GitHub