{
  "id": "arxiv:2505.11717",
  "citation-key": "arxiv_2505_11717",
  "type": "article",
  "title": "WebInject: Prompt Injection Attack to Web Agents",
  "URL": "https://arxiv.org/abs/2505.11717v4",
  "custom": {
    "catalog_id": "arxiv:2505.11717",
    "catalog_kind": "paper",
    "catalog_review_status": "curated",
    "canonical_source_url": "https://arxiv.org/abs/2505.11717",
    "identifiers": {
      "arxiv": "2505.11717"
    },
    "first_published_at": "2025-05-16",
    "record_updated_at": "2025-10-17",
    "catalog_scope": "core",
    "arxiv_snapshot": {
      "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
      "abstract_sha256": "989673e9cb9103f8c7a28a0b4d838bd83c6e5d87b7f5e44bdb6753d7f0c69a88",
      "submitted_at": "2025-05-16T22:00:26Z",
      "updated_at": "2025-10-17T01:52:39Z",
      "version": 4,
      "versioned_url": "https://arxiv.org/abs/2505.11717v4"
    }
  },
  "note": "First published: 2025-05-16; Recorded arXiv version: v4; Recorded version updated: 2025-10-17T01:52:39Z.",
  "author": [
    {
      "literal": "Xilong Wang"
    },
    {
      "literal": "John Bloch"
    },
    {
      "literal": "Zedian Shao"
    },
    {
      "literal": "Yuepeng Hu"
    },
    {
      "literal": "Shuyan Zhou"
    },
    {
      "literal": "Neil Zhenqiang Gong"
    }
  ],
  "issued": {
    "date-parts": [
      [
        2025,
        5,
        16
      ]
    ]
  },
  "archive": "arXiv",
  "archive_location": "2505.11717",
  "genre": "preprint",
  "version": "4"
}