{
  "aliases": [],
  "authors": [
    "Tanqiu Jiang",
    "Min Bai",
    "Nikolaos Pappas",
    "Yanjun Qi",
    "Sandesh Swamy"
  ],
  "details": {
    "arxiv_snapshot": {
      "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
      "abstract_sha256": "1389b3ccafad820f5b9f5c306bbcdbaa27fe4d5918c83bb8535c9eadd6ff2468",
      "submitted_at": "2025-10-04T01:57:20Z",
      "updated_at": "2025-10-04T01:57:20Z",
      "version": 1,
      "versioned_url": "https://arxiv.org/abs/2510.03612v1"
    }
  },
  "environments": [
    "web"
  ],
  "evidence": [
    {
      "method": "arxiv_api",
      "retrieved_at": "2026-10-16T06:36:47Z",
      "role": "primary",
      "sha256": "ae98e77b8bb125e45277aacec768a047e7bb0e13f33ca9ff6ca7c19e29e56cca",
      "supports": [
        "name",
        "authors",
        "published_at",
        "updated_at",
        "identifiers.arxiv",
        "details.arxiv_snapshot"
      ],
      "url": "https://export.arxiv.org/api/query?search_query=%28ti%3A%22computer+use%22+OR+ti%3A%22computer-use%22+OR+ti%3A%22GUI+agent%22+OR+ti%3A%22GUI+agents%22+OR+ti%3A%22GUI+grounding%22+OR+ti%3A%22web+agents%22+OR+ti%3A%22browser+agent%22%29+AND+submittedDate%3A%5B200001010000+TO+202610160636%5D&start=500&max_results=100&sortBy=submittedDate&sortOrder=descending"
    },
    {
      "method": "editorial_primary_review",
      "retrieved_at": "2026-11-05T23:02:00Z",
      "role": "primary",
      "sha256": "2343ea50b1761631c89f41f46494ffa8b9c95a6d6b1cf95d58720bf26271ce29",
      "supports": [
        "name",
        "kind",
        "summary",
        "environments",
        "topics",
        "scope",
        "relations"
      ],
      "url": "https://export.arxiv.org/api/query?id_list=2509.14547%2C2509.14744%2C2509.15061%2C2509.15237%2C2509.17336%2C2509.19185%2C2509.19199%2C2509.21072%2C2509.21291%2C2509.21733%2C2509.21766%2C2509.21799%2C2509.22644%2C2509.22715%2C2509.22830%2C2509.23694%2C2509.23738%2C2509.24704%2C2509.25301%2C2509.25455%2C2509.25693%2C2510.00078%2C2510.00172%2C2510.00507%2C2510.00515%2C2510.02190%2C2510.02204%2C2510.02608%2C2510.03204%2C2510.03485%2C2510.03612%2C2510.04452%2C2510.04491%2C2510.04536%2C2510.04673%2C2510.04791%2C2510.05096%2C2510.05137%2C2510.05156%2C2510.05788%2C2510.06223%2C2510.06607%2C2510.07284%2C2510.07532%2C2510.07915%2C2510.08787%2C2510.09116%2C2510.09517%2C2510.10049%2C2510.10587&max_results=50"
    }
  ],
  "id": "arxiv:2510.03612",
  "identifiers": {
    "arxiv": "2510.03612"
  },
  "kind": "paper",
  "last_verified_at": "2026-11-05T23:02:00Z",
  "licenses": {
    "code": null,
    "data": null,
    "document": null,
    "weights": null
  },
  "links": [
    {
      "rel": "primary",
      "url": "https://arxiv.org/abs/2510.03612"
    }
  ],
  "name": "Cross-Modal Content Optimization for Steering Web Agent Preferences",
  "notes": "The annotation and scope were reviewed against the complete retained arXiv abstract (v1). The attacker can edit only their own listing's images and textual metadata. Experiments, reported performance and artifact availability have not been independently reproduced.",
  "published_at": "2025-10-04",
  "relations": [],
  "review_status": "curated",
  "scope": "core",
  "summary": "Introduces Cross-Modal Preference Steering (CPS), a black-box attack that edits a listing's images and text to steer VLM-based web agents' selections.",
  "topics": [
    "safety-security",
    "web-navigation"
  ],
  "updated_at": "2025-10-04",
  "url": "https://arxiv.org/abs/2510.03612"
}