MobileJailBench: Red Queen Jailbreak Benchmarking for Mobile Agents

MobileJailBench evaluates mobile-agent jailbreaks in a browser-based Android-like simulator, combining feedback-driven attack evolution, separately admitted task expansions and evidence-grounded outcome adjudication.

AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.

What is this resource?

Resource type

Research papers

Environment

web

Topics

safety-security, mobile-navigation, evaluation, observability, cross-app

Record publication date

2026-10-16

Evidence retrieved

2026-10-20T08:27:26.236797+00:00

Resource ID

arxiv:2610.23303

Recorded paper version

arXiv v1

Version updated: 2026-10-16T11:06:37Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Authors

Songping Wang, Borui Li, Qinglong Liu, Yueming Lyu, Yi Huang, Fengting Li, Chao Feng, Caifeng Shan

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Scope and limitations

Reviewed the complete retained abstract and selected exact-v1 threat-model, construction and evaluation sections. Execution uses a browser-based Android-like simulator, not real Android isolation or live services. The attacker controls instructions and designated carriers, not privileged simulator state/APIs or system/model/harness internals. Rates depend on release, budget and adjudication coverage. SAF labels track observable expressions and actions, not latent reasoning; unresolved episodes are excluded from rate denominators. No independent reproduction.

Primary evidence and verification

Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.

1. arxiv api

   Retrieved 2026-10-20T05:52:01Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

   Content fingerprint

   63e37cd26bfe69455a3fa835f3d6ba4cfcc5bb7dc91f90505920d37b1e08f0b6
2. editorial primary review

   Retrieved 2026-10-20T08:27:26.236797+00:00. Supports: name, kind, scope.

   Content fingerprint

   80bed80786f939973d0d13b4f892300fee02a6110e326247131fc83d257796de
3. editorial primary review

   Retrieved 2026-10-20T10:42:09.967883+00:00. Supports: summary, environments, topics, scope, notes.

   Content fingerprint

   ec9d647818be346ddbf7807be87b4789cd53e50c5d3d7a7904ad4f49bc71c38e

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.