% AwesomeCUA: {"catalog_id": "arxiv:2509.11250", "catalog_review_status": "curated", "catalog_scope": "core", "identifiers": {"arxiv": "2509.11250"}}
@misc{arxiv_2509_11250,
  title = {{Environmental Injection Attacks against GUI Agents in Realistic Dynamic Environments}},
  author = {{Yitong Zhang} and {Ximo Li} and {Liyi Cai} and {Jia Li}},
  year = {2025},
  eprint = {2509.11250v3},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2509.11250v3},
  note = {First published: 2025-09-14; Recorded arXiv version: v3; Recorded version updated: 2026-08-24T12:04:58Z.}
}