Securing Computer-Use Agents Against Branch Steering Attacks

Introduces STEER-Bench to study branch-steering attacks that manipulate untrusted web data toward hazardous paths already permitted by an agent’s plan. Its COBRA architecture combines trusted branching plans with advance constraints on the parameters and destinations each branch can use.

AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.

What is this resource?

Resource type

Research papers

Environment

web

Topics

safety-security, planning, evaluation

Record publication date

2026-10-02

Evidence retrieved

2026-10-16T06:36:29Z

Resource ID

arxiv:2610.03089

Recorded paper version

arXiv v1

Version updated: 2026-10-02T10:08:39Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Authors

Giulio Zingrillo, Hanna Foerster, Ilia Shumailov, Yiren Zhao, Robert Mullins

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Scope and limitations

The annotation and scope were reviewed against the primary paper abstract. Experimental results and released artifacts have not been independently reproduced.

Primary evidence and verification

Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.

1. arxiv api

   Retrieved 2026-10-16T06:36:29Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

   Content fingerprint

   74e521e46c46489e48f9bad5d774625a85b5ccd32828969fd98e1a4c453b899f
2. editorial primary review

   Retrieved 2026-10-16T06:36:29Z. Supports: name, kind, summary, environments, topics, scope, relations.

   Content fingerprint

   74e521e46c46489e48f9bad5d774625a85b5ccd32828969fd98e1a4c453b899f

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.