# EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Evaluates privacy-directed webpage instruction injection against generalist web agents using PII-related interaction steps from Mind2Web, including attempts to expose specific user information or entire requests.

- Catalog URL: https://awesomecua.github.io/resources/arxiv-2409-11295/
- Original source: https://arxiv.org/abs/2409.11295
- Kind: paper
- Review: curated
- Scope: core
- Environments: web
- Topics: safety-security, web-navigation, evaluation
- Evidence checked: 2026-10-16T06:36:58Z
- ID: arxiv:2409.11295

## Limitations

Reviewed against the retained original arXiv abstract. Experimental results and artifact availability have not been independently reproduced.

- Record JSON: https://awesomecua.github.io/resources/arxiv-2409-11295/record.json

## Authors

Zeyi Liao, Lingbo Mo, Chejian Xu, Mintong Kang, Jiawei Zhang, Chaowei Xiao, Yuan Tian, Bo Li, Huan Sun

## Citation exports

- BibTeX: https://awesomecua.github.io/resources/arxiv-2409-11295/citation.bib
- CSL JSON: https://awesomecua.github.io/resources/arxiv-2409-11295/citation.csl.json

## Recorded arXiv snapshot

- Version: 5
- Version source: https://arxiv.org/abs/2409.11295v5
- First submission: 2024-09-17T15:49:44Z
- Version updated: 2025-03-12T20:54:00Z
- Abstract SHA-256: 897cdbb6aa52478b260ecba830e0a13527c2614454f7c766c9f5c8c9bdbfd4e3
- Abstract hash normalization: sha256-utf8-whitespace-collapsed-v1

## License declarations

- code: not recorded
- data: not recorded
- document: not recorded
- weights: not recorded

## Primary evidence

- https://export.arxiv.org/api/query?search_query=%28ti%3A%22computer+use%22+OR+ti%3A%22computer-use%22+OR+ti%3A%22GUI+agent%22+OR+ti%3A%22GUI+agents%22+OR+ti%3A%22GUI+grounding%22+OR+ti%3A%22web+agents%22+OR+ti%3A%22browser+agent%22%29+AND+submittedDate%3A%5B200001010000+TO+202610160636%5D&start=800&max_results=100&sortBy=submittedDate&sortOrder=descending (retrieved 2026-10-16T06:36:58Z; SHA-256 c87e97eb397da04806d53145cf9c13be739fc657bb54dca9318c8c4ed2a36249)
- https://export.arxiv.org/api/query?search_query=%28ti%3A%22computer+use%22+OR+ti%3A%22computer-use%22+OR+ti%3A%22GUI+agent%22+OR+ti%3A%22GUI+agents%22+OR+ti%3A%22GUI+grounding%22+OR+ti%3A%22web+agents%22+OR+ti%3A%22browser+agent%22%29+AND+submittedDate%3A%5B200001010000+TO+202610160636%5D&start=800&max_results=100&sortBy=submittedDate&sortOrder=descending (retrieved 2026-10-16T06:36:58Z; SHA-256 c87e97eb397da04806d53145cf9c13be739fc657bb54dca9318c8c4ed2a36249)