% AwesomeCUA: {"catalog_id": "arxiv:2603.15714", "catalog_review_status": "curated", "catalog_scope": "core", "identifiers": {"arxiv": "2603.15714"}}
@misc{arxiv_2603_15714,
  title = {{How Vulnerable Are AI Agents to Indirect Prompt Injections? Insights from a Large-Scale Public Competition}},
  author = {{Mateusz Dziemian} and {Maxwell Lin} and {Xiaohan Fu} and {Micha Nowak} and {Nick Winter} and {Eliot Jones} and {Andy Zou} and {Lama Ahmad} and {Kamalika Chaudhuri} and {Sahana Chennabasappa} and {Xander Davies} and {Lauren Deason} and {Benjamin L. Edelman} and {Tanner Emek} and {Ivan Evtimov} and {Jim Gust} and {Maia Hamin} and {Kat He} and {Klaudia Krawiecka} and {Riccardo Patana} and {Neil Perry} and {Troy Peterson} and {Xiangyu Qi} and {Javier Rando} and {Zifan Wang} and {Zihan Wang} and {Spencer Whitman} and {Eric Winsor} and {Arman Zharmagambetov} and {Matt Fredrikson} and {Zico Kolter}},
  year = {2026},
  eprint = {2603.15714v1},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2603.15714v1},
  note = {First published: 2026-03-16; Recorded arXiv version: v1; Recorded version updated: 2026-03-16T14:49:36Z.}
}