% AwesomeCUA: {"catalog_id": "arxiv:2608.08939", "catalog_review_status": "curated", "catalog_scope": "core", "identifiers": {"arxiv": "2608.08939"}}
@misc{arxiv_2608_08939,
  title = {{Not an A11y: How Android Accessibility Exposes Mobile AI Agents to Indirect Prompt Injection}},
  author = {{Rahul Deivasigamani} and {Sayeda Faatin Alvi} and {Derqui Andrea} and {Kaushal Punjabi} and {Stjepan Picek}},
  year = {2026},
  eprint = {2608.08939v1},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2608.08939v1},
  note = {First published: 2026-08-09; Recorded arXiv version: v1; Recorded version updated: 2026-08-09T22:13:55Z.}
}