Research papers

Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels

Measures how untrusted third-party notifications, messages, and app content can hijack mobile LLM agents into executing unauthorized cross-app actions.

AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.

Original source ↗Read as MarkdownRecord JSON

What is this resource?

Resource type
Research papers
Environment
unspecified
Topics
safety-security, mobile-navigation, evaluation
Record publication date
2025-10-31
Evidence retrieved
2026-10-18T10:54:12Z
Resource ID
arxiv:2510.27140

Recorded paper version

arXiv v3

Version updated: 2026-07-07T02:18:26Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Abstract fingerprint61b611712fff54af25aae660f2353fa6c3aaa764b0767831ebf2278c120d9dea

Authors

Chenghao Du, Quanfeng Huang, Tingxuan Tang, Zihao Wang, Adwait Nadkarni, Yue Xiao

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Safety & securityMobile navigationEvaluation

Scope and limitations

The annotation and scope were reviewed against the primary paper abstract. Experimental results and released artifacts have not been independently reproduced.

Primary evidence and verification

Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.

  1. arxiv api

    Retrieved 2026-10-18T10:54:12Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

    Content fingerprint5f5bae19420f79231516d4bcf604ea18d4f930fc7790cde5a3e7fcb8d41a1126
  2. editorial primary review

    Retrieved 2026-10-18T10:54:12Z. Supports: name, kind, summary, environments, topics, scope, relations.

    Content fingerprint5f5bae19420f79231516d4bcf604ea18d4f930fc7790cde5a3e7fcb8d41a1126

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.