{
  "id": "arxiv:2509.11250",
  "citation-key": "arxiv_2509_11250",
  "type": "article",
  "title": "Environmental Injection Attacks against GUI Agents in Realistic Dynamic Environments",
  "URL": "https://arxiv.org/abs/2509.11250v3",
  "custom": {
    "catalog_id": "arxiv:2509.11250",
    "catalog_kind": "paper",
    "catalog_review_status": "curated",
    "canonical_source_url": "https://arxiv.org/abs/2509.11250",
    "identifiers": {
      "arxiv": "2509.11250"
    },
    "first_published_at": "2025-09-14",
    "record_updated_at": "2026-08-24",
    "catalog_scope": "core",
    "arxiv_snapshot": {
      "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
      "abstract_sha256": "9ab96edd8e52b3a490455b46878c92c23d15c0f9e105e71dbd6848e058da42ec",
      "submitted_at": "2025-09-14T12:47:54Z",
      "updated_at": "2026-08-24T12:04:58Z",
      "version": 3,
      "versioned_url": "https://arxiv.org/abs/2509.11250v3"
    }
  },
  "note": "First published: 2025-09-14; Recorded arXiv version: v3; Recorded version updated: 2026-08-24T12:04:58Z.",
  "author": [
    {
      "literal": "Yitong Zhang"
    },
    {
      "literal": "Ximo Li"
    },
    {
      "literal": "Liyi Cai"
    },
    {
      "literal": "Jia Li"
    }
  ],
  "issued": {
    "date-parts": [
      [
        2025,
        9,
        14
      ]
    ]
  },
  "archive": "arXiv",
  "archive_location": "2509.11250",
  "genre": "preprint",
  "version": "3"
}