{
  "id": "arxiv:2604.02623",
  "citation-key": "arxiv_2604_02623",
  "type": "article",
  "title": "Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents",
  "URL": "https://arxiv.org/abs/2604.02623v2",
  "custom": {
    "catalog_id": "arxiv:2604.02623",
    "catalog_kind": "paper",
    "catalog_review_status": "curated",
    "canonical_source_url": "https://arxiv.org/abs/2604.02623",
    "identifiers": {
      "arxiv": "2604.02623"
    },
    "first_published_at": "2026-04-03",
    "record_updated_at": "2026-04-07",
    "catalog_scope": "core",
    "arxiv_snapshot": {
      "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
      "abstract_sha256": "a37f4bdc495e10e4ae301ebff6faa28cdfa6de152d4619c051083b5dce41e6ba",
      "submitted_at": "2026-04-03T01:25:12Z",
      "updated_at": "2026-04-07T14:45:15Z",
      "version": 2,
      "versioned_url": "https://arxiv.org/abs/2604.02623v2"
    }
  },
  "note": "First published: 2026-04-03; Recorded arXiv version: v2; Recorded version updated: 2026-04-07T14:45:15Z.",
  "author": [
    {
      "literal": "Wei Zou"
    },
    {
      "literal": "Mingwen Dong"
    },
    {
      "literal": "Miguel Romero Calvo"
    },
    {
      "literal": "Shuaichen Chang"
    },
    {
      "literal": "Jiang Guo"
    },
    {
      "literal": "Dongkyu Lee"
    },
    {
      "literal": "Xing Niu"
    },
    {
      "literal": "Xiaofei Ma"
    },
    {
      "literal": "Yanjun Qi"
    },
    {
      "literal": "Jiarong Jiang"
    }
  ],
  "issued": {
    "date-parts": [
      [
        2026,
        4,
        3
      ]
    ]
  },
  "archive": "arXiv",
  "archive_location": "2604.02623",
  "genre": "preprint",
  "version": "2"
}