Agent Data Injection Attacks are Realistic Threats to AI Agents

This study examines agent data injection, where untrusted content impersonates trusted metadata or tool-context data. It reports arbitrary-click vulnerabilities in web agents alongside separate coding-agent attacks, highlighting trust-boundary failures beyond instruction injection.

AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.

What is this resource?

Resource type

Research papers

Environment

web

Topics

safety-security, evaluation, robustness

Record publication date

2026-07-06

Evidence retrieved

2026-10-17T12:31:32Z

Resource ID

arxiv:2607.05120

Recorded paper version

arXiv v1

Version updated: 2026-07-06T14:07:49Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Authors

Woohyuk Choi, Juhee Kim, Taehyun Kang, Jihyeon Jeong, Luyi Xing, Byoungyoung Lee

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Scope and limitations

Reviewed against the complete retained official abstract. Experimental findings and release availability have not been independently reproduced or verified.

Primary evidence and verification

Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.

1. arxiv api

   Retrieved 2026-10-17T12:31:32Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

   Content fingerprint

   5128028eea81e3ae80715cb038513012598c0c81a7cbfe8c0d4d6adb6c00e518
2. editorial primary review

   Retrieved 2026-10-17T12:31:32Z. Supports: name, kind, summary, environments, topics, scope.

   Content fingerprint

   5128028eea81e3ae80715cb038513012598c0c81a7cbfe8c0d4d6adb6c00e518

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.