Why Are Web AI Agents More Vulnerable Than Standalone LLMs? A Security Analysis

Analyzes web-agent vulnerabilities at the component level, examining goal placement in prompts, multistep action generation, and observations as sources of increased susceptibility.

AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.

What is this resource?

Resource type

Research papers

Environment

web

Topics

safety-security, evaluation, web-navigation

Record publication date

2025-02-27

Evidence retrieved

2026-10-17T11:20:04Z

Resource ID

arxiv:2502.20383

Recorded paper version

arXiv v3

Version updated: 2025-09-21T22:29:53Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Authors

Jeffrey Yang Fan Chiang, Seungjae Lee, Jia-Bin Huang, Furong Huang, Yizheng Chen

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Scope and limitations

Reviewed against the exact-version official arXiv abstract page; its complete title, ordered author list, visible version, and normalized abstract SHA match the retained snapshot. The original API response body was not locally available. Experimental results and artifact availability have not been independently reproduced.

Primary evidence and verification

Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.

1. arxiv api

   Retrieved 2026-10-17T07:57:44Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

   Content fingerprint

   9ca057ee6538002c739e58a7b3f86fc51a434d085a33e5590f0720e4f27c6b24
2. editorial primary review

   Retrieved 2026-10-17T11:20:04Z. Supports: name, kind, summary, environments, topics, scope, notes.

   Content fingerprint

   0118540c95d316ed30aabf783c072d413677aaf89539316e08e1d81ddab2c5e6

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.