% AwesomeCUA: {"catalog_id": "arxiv:2610.15138", "catalog_review_status": "curated", "catalog_scope": "core", "identifiers": {"arxiv": "2610.15138"}}
@misc{arxiv_2610_15138,
  title = {{The Agent Clicks Approve: Injected Page Text Makes Browser Agents Authorize Access the Task Never Named}},
  author = {{Md Imran Hossen}},
  year = {2026},
  eprint = {2610.15138v1},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2610.15138v1},
  note = {First published: 2026-10-10; Recorded arXiv version: v1; Recorded version updated: 2026-10-10T19:30:31Z.}
}