Attack Context

Computer use Research

Attacks targeting agents that operate browsers, desktops, and other interfaces

1 matching entry out of 3 in this category

Computer use research results

1 entry

Cross-Site Prompt Injection in Web Agents

Published Jul 9, 2026Analyzed Jul 21, 2026Source: arXiv

The paper defines Cross-Site Prompting (XSP): attacker-controlled text in reviews, posts, seller listings, advertisements, or embeds can be interpreted as instructions by a web agent and steer its browser actions. It evaluates three reproducible WebArena attack templates—Shortcut, Fake Completion, and Ignore Instruction—plus WASP and adaptive stress tests. This is an evaluated agent-security issue and mitigation, not a claimed production CVE.

Prismata: Confining Cross-Site Prompt Injection in Web Agents

Evaluated models: GPT-5.4, GPT-5.4-mini, GPT-5.4 Nano+4 more

GPT-5.4
GPT-5.4-mini
GPT-5.4 Nano
Gemini 3 Flash
GPT-oss 120B
Qwen 3 8B
MiniMax M2.5

Related research categories