% AwesomeCUA: {"catalog_id": "arxiv:2604.02623", "catalog_review_status": "curated", "catalog_scope": "core", "identifiers": {"arxiv": "2604.02623"}}
@misc{arxiv_2604_02623,
  title = {{Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents}},
  author = {{Wei Zou} and {Mingwen Dong} and {Miguel Romero Calvo} and {Shuaichen Chang} and {Jiang Guo} and {Dongkyu Lee} and {Xing Niu} and {Xiaofei Ma} and {Yanjun Qi} and {Jiarong Jiang}},
  year = {2026},
  eprint = {2604.02623v2},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2604.02623v2},
  note = {First published: 2026-04-03; Recorded arXiv version: v2; Recorded version updated: 2026-04-07T14:45:15Z.}
}