Refusal-Trained LLMs Are Easily Jailbroken As Browser Agents

Introduces BrowserART and studies whether chat-model refusal behavior transfers to browser agents carrying out potentially harmful instructions.

AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.

What is this resource?

Resource type

Research papers

Environment

web

Topics

safety-security, evaluation

Record publication date

2024-10-11

Evidence retrieved

2026-10-16T06:36:58Z

Resource ID

arxiv:2410.13886

Recorded paper version

arXiv v2

Version updated: 2024-10-21T18:06:58Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Authors

Priyanshu Kumar, Elaine Lau, Saranya Vijayakumar, Tu Trinh, Scale Red Team, Elaine Chang, Vaughn Robinson, Sean Hendryx, Shuyan Zhou, Matt Fredrikson, Summer Yue, Zifan Wang

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Scope and limitations

The annotation and scope were reviewed against the primary paper abstract. Experimental results and released artifacts have not been independently reproduced.

Connected assets

These links come from reviewed resource records. A documentation link does not imply a training-data or evaluation dependency.

• Documented resource: BrowserART · Benchmarks · relationship evidence

Primary evidence and verification

Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.

1. arxiv api

   Retrieved 2026-10-16T06:36:58Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

   Content fingerprint

   c87e97eb397da04806d53145cf9c13be739fc657bb54dca9318c8c4ed2a36249
2. editorial primary review

   Retrieved 2026-10-16T06:36:58Z. Supports: name, kind, summary, environments, topics, scope, relations.

   Content fingerprint

   c87e97eb397da04806d53145cf9c13be739fc657bb54dca9318c8c4ed2a36249

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.