# MobileJailBench: Red Queen Jailbreak Benchmarking for Mobile Agents

MobileJailBench evaluates mobile-agent jailbreaks in a browser-based Android-like simulator, combining feedback-driven attack evolution, separately admitted task expansions and evidence-grounded outcome adjudication.

- Catalog URL: https://awesomecua.github.io/resources/arxiv-2610-23303/
- Original source: https://arxiv.org/abs/2610.23303
- Kind: paper
- Review: curated
- Scope: core
- Environments: web
- Topics: safety-security, mobile-navigation, evaluation, observability, cross-app
- Evidence checked: 2026-10-20T08:27:26.236797+00:00
- ID: arxiv:2610.23303

## Limitations

Reviewed the complete retained abstract and selected exact-v1 threat-model, construction and evaluation sections. Execution uses a browser-based Android-like simulator, not real Android isolation or live services. The attacker controls instructions and designated carriers, not privileged simulator state/APIs or system/model/harness internals. Rates depend on release, budget and adjudication coverage. SAF labels track observable expressions and actions, not latent reasoning; unresolved episodes are excluded from rate denominators. No independent reproduction.

- Record JSON: https://awesomecua.github.io/resources/arxiv-2610-23303/record.json

## Authors

Songping Wang, Borui Li, Qinglong Liu, Yueming Lyu, Yi Huang, Fengting Li, Chao Feng, Caifeng Shan

## Citation exports

- BibTeX: https://awesomecua.github.io/resources/arxiv-2610-23303/citation.bib
- CSL JSON: https://awesomecua.github.io/resources/arxiv-2610-23303/citation.csl.json

## Recorded arXiv snapshot

- Version: 1
- Version source: https://arxiv.org/abs/2610.23303v1
- First submission: 2026-10-16T11:06:37Z
- Version updated: 2026-10-16T11:06:37Z
- Abstract SHA-256: ea753c1cb0666950d89f2781511f26872e3d5b1c2fd2434896248214160fa22c
- Abstract hash normalization: sha256-utf8-whitespace-collapsed-v1

## License declarations

- code: not recorded
- data: not recorded
- document: not recorded
- weights: not recorded

## Primary evidence

- https://export.arxiv.org/api/query?id_list=2610.19384%2C2610.22672%2C2610.22697%2C2610.23303%2C2610.23307%2C2610.24729&max_results=6 (retrieved 2026-10-20T05:52:01Z; SHA-256 63e37cd26bfe69455a3fa835f3d6ba4cfcc5bb7dc91f90505920d37b1e08f0b6)
- https://export.arxiv.org/api/query?search_query=%28ti%3A%22computer+use%22+OR+ti%3A%22computer-use%22+OR+ti%3A%22GUI+agent%22+OR+ti%3A%22GUI+agents%22+OR+ti%3A%22GUI+grounding%22+OR+ti%3A%22web+agent%22+OR+ti%3A%22web+agents%22+OR+ti%3A%22browser+agent%22+OR+ti%3A%22browser+agents%22+OR+ti%3A%22mobile+agent%22+OR+ti%3A%22mobile+agents%22+OR+ti%3A%22desktop+agent%22%29+AND+submittedDate%3A%5B202610130000+TO+202610192359%5D&start=0&max_results=200&sortBy=submittedDate&sortOrder=descending (retrieved 2026-10-20T08:27:26.236797+00:00; SHA-256 80bed80786f939973d0d13b4f892300fee02a6110e326247131fc83d257796de)
- https://arxiv.org/html/2610.23303v1 (retrieved 2026-10-20T10:42:09.967883+00:00; SHA-256 ec9d647818be346ddbf7807be87b4789cd53e50c5d3d7a7904ad4f49bc71c38e)