# Environmental Injection Attacks against GUI Agents in Realistic Dynamic Environments

Introduces Chameleon, an environmental-injection evaluation framework that varies webpage content and trigger context. It combines simulated page variation with attention-based optimization and tests GUI agents across realistic websites.

- Catalog URL: https://awesomecua.github.io/resources/arxiv-2509-11250/
- Original source: https://arxiv.org/abs/2509.11250
- Kind: paper
- Review: curated
- Scope: core
- Environments: web
- Topics: safety-security, robustness, evaluation
- Evidence checked: 2026-10-16T06:36:50Z
- ID: arxiv:2509.11250

## Limitations

Reviewed against the complete retained original arXiv abstract. Experimental results and artifact availability have not been independently reproduced.

- Record JSON: https://awesomecua.github.io/resources/arxiv-2509-11250/record.json

## Authors

Yitong Zhang, Ximo Li, Liyi Cai, Jia Li

## Citation exports

- BibTeX: https://awesomecua.github.io/resources/arxiv-2509-11250/citation.bib
- CSL JSON: https://awesomecua.github.io/resources/arxiv-2509-11250/citation.csl.json

## Recorded arXiv snapshot

- Version: 3
- Version source: https://arxiv.org/abs/2509.11250v3
- First submission: 2025-09-14T12:47:54Z
- Version updated: 2026-08-24T12:04:58Z
- Abstract SHA-256: 9ab96edd8e52b3a490455b46878c92c23d15c0f9e105e71dbd6848e058da42ec
- Abstract hash normalization: sha256-utf8-whitespace-collapsed-v1

## License declarations

- code: not recorded
- data: not recorded
- document: not recorded
- weights: not recorded

## Primary evidence

- https://export.arxiv.org/api/query?search_query=%28ti%3A%22computer+use%22+OR+ti%3A%22computer-use%22+OR+ti%3A%22GUI+agent%22+OR+ti%3A%22GUI+agents%22+OR+ti%3A%22GUI+grounding%22+OR+ti%3A%22web+agents%22+OR+ti%3A%22browser+agent%22%29+AND+submittedDate%3A%5B200001010000+TO+202610160636%5D&start=600&max_results=100&sortBy=submittedDate&sortOrder=descending (retrieved 2026-10-16T06:36:50Z; SHA-256 26fb4922c4c0bb5c9069935ed0aef0a9f56938cf8ae1af9724894fa1409955fb)
- https://export.arxiv.org/api/query?search_query=%28ti%3A%22computer+use%22+OR+ti%3A%22computer-use%22+OR+ti%3A%22GUI+agent%22+OR+ti%3A%22GUI+agents%22+OR+ti%3A%22GUI+grounding%22+OR+ti%3A%22web+agents%22+OR+ti%3A%22browser+agent%22%29+AND+submittedDate%3A%5B200001010000+TO+202610160636%5D&start=600&max_results=100&sortBy=submittedDate&sortOrder=descending (retrieved 2026-10-16T06:36:50Z; SHA-256 26fb4922c4c0bb5c9069935ed0aef0a9f56938cf8ae1af9724894fa1409955fb)