# CaMeLs Can Use Computers Too: System-level Security for Computer Use Agents

NOVA separates trusted task planning from screen-derived observations by producing a branching plan before execution and resolving runtime values through perception. Its OSWorld study examines security and utility while identifying remaining risks from perception-driven branch steering.

- Catalog URL: https://awesomecua.github.io/resources/arxiv-2601-09923/
- Original source: https://arxiv.org/abs/2601.09923
- Kind: paper
- Review: curated
- Scope: core
- Environments: desktop
- Topics: safety-security, planning, robustness
- Evidence checked: 2026-10-16T06:36:43Z
- ID: arxiv:2601.09923

## Limitations

The annotation was reviewed against the complete retained official abstract. Experimental findings and released artifacts have not been independently reproduced.

- Record JSON: https://awesomecua.github.io/resources/arxiv-2601-09923/record.json

## Authors

Hanna Foerster, Tom Blanchard, Kristina Nikolić, Ilia Shumailov, Cheng Zhang, Robert Mullins, Nicolas Papernot, Florian Tramèr, Yiren Zhao

## Citation exports

- BibTeX: https://awesomecua.github.io/resources/arxiv-2601-09923/citation.bib
- CSL JSON: https://awesomecua.github.io/resources/arxiv-2601-09923/citation.csl.json

## Recorded arXiv snapshot

- Version: 3
- Version source: https://arxiv.org/abs/2601.09923v3
- First submission: 2026-01-14T23:06:35Z
- Version updated: 2026-06-04T15:38:02Z
- Abstract SHA-256: e32917bc92b65701eea06c09a2c681c7504418f8ce888af2b72012a1da50c9f6
- Abstract hash normalization: sha256-utf8-whitespace-collapsed-v1

## License declarations

- code: not recorded
- data: not recorded
- document: not recorded
- weights: not recorded

## Primary evidence

- https://export.arxiv.org/api/query?search_query=%28ti%3A%22computer+use%22+OR+ti%3A%22computer-use%22+OR+ti%3A%22GUI+agent%22+OR+ti%3A%22GUI+agents%22+OR+ti%3A%22GUI+grounding%22+OR+ti%3A%22web+agents%22+OR+ti%3A%22browser+agent%22%29+AND+submittedDate%3A%5B200001010000+TO+202610160636%5D&start=400&max_results=100&sortBy=submittedDate&sortOrder=descending (retrieved 2026-10-16T06:36:43Z; SHA-256 c432f419481a105a8ce71174ec4aea23c4f0d36ddf89cfe1d0974fa349f6cb59)
- https://export.arxiv.org/api/query?search_query=%28ti%3A%22computer+use%22+OR+ti%3A%22computer-use%22+OR+ti%3A%22GUI+agent%22+OR+ti%3A%22GUI+agents%22+OR+ti%3A%22GUI+grounding%22+OR+ti%3A%22web+agents%22+OR+ti%3A%22browser+agent%22%29+AND+submittedDate%3A%5B200001010000+TO+202610160636%5D&start=400&max_results=100&sortBy=submittedDate&sortOrder=descending (retrieved 2026-10-16T06:36:43Z; SHA-256 c432f419481a105a8ce71174ec4aea23c4f0d36ddf89cfe1d0974fa349f6cb59)