{
  "aliases": [],
  "authors": [
    "Songping Wang",
    "Borui Li",
    "Qinglong Liu",
    "Yueming Lyu",
    "Yi Huang",
    "Fengting Li",
    "Chao Feng",
    "Caifeng Shan"
  ],
  "details": {
    "arxiv_snapshot": {
      "abstract_hash_method": "sha256-utf8-whitespace-collapsed-v1",
      "abstract_sha256": "ea753c1cb0666950d89f2781511f26872e3d5b1c2fd2434896248214160fa22c",
      "submitted_at": "2026-10-16T11:06:37Z",
      "updated_at": "2026-10-16T11:06:37Z",
      "version": 1,
      "versioned_url": "https://arxiv.org/abs/2610.23303v1"
    }
  },
  "environments": [
    "web"
  ],
  "evidence": [
    {
      "method": "arxiv_api",
      "retrieved_at": "2026-10-20T05:52:01Z",
      "role": "primary",
      "sha256": "63e37cd26bfe69455a3fa835f3d6ba4cfcc5bb7dc91f90505920d37b1e08f0b6",
      "supports": [
        "name",
        "authors",
        "published_at",
        "updated_at",
        "identifiers.arxiv",
        "details.arxiv_snapshot"
      ],
      "url": "https://export.arxiv.org/api/query?id_list=2610.19384%2C2610.22672%2C2610.22697%2C2610.23303%2C2610.23307%2C2610.24729&max_results=6"
    },
    {
      "method": "editorial_primary_review",
      "retrieved_at": "2026-10-20T08:27:26.236797+00:00",
      "role": "primary",
      "sha256": "80bed80786f939973d0d13b4f892300fee02a6110e326247131fc83d257796de",
      "supports": [
        "name",
        "kind",
        "scope"
      ],
      "url": "https://export.arxiv.org/api/query?search_query=%28ti%3A%22computer+use%22+OR+ti%3A%22computer-use%22+OR+ti%3A%22GUI+agent%22+OR+ti%3A%22GUI+agents%22+OR+ti%3A%22GUI+grounding%22+OR+ti%3A%22web+agent%22+OR+ti%3A%22web+agents%22+OR+ti%3A%22browser+agent%22+OR+ti%3A%22browser+agents%22+OR+ti%3A%22mobile+agent%22+OR+ti%3A%22mobile+agents%22+OR+ti%3A%22desktop+agent%22%29+AND+submittedDate%3A%5B202610130000+TO+202610192359%5D&start=0&max_results=200&sortBy=submittedDate&sortOrder=descending"
    },
    {
      "method": "editorial_primary_review",
      "retrieved_at": "2026-10-20T10:42:09.967883+00:00",
      "role": "primary",
      "sha256": "ec9d647818be346ddbf7807be87b4789cd53e50c5d3d7a7904ad4f49bc71c38e",
      "supports": [
        "summary",
        "environments",
        "topics",
        "scope",
        "notes"
      ],
      "url": "https://arxiv.org/html/2610.23303v1"
    }
  ],
  "id": "arxiv:2610.23303",
  "identifiers": {
    "arxiv": "2610.23303"
  },
  "kind": "paper",
  "last_verified_at": "2026-10-20T08:27:26.236797+00:00",
  "licenses": {
    "code": null,
    "data": null,
    "document": null,
    "weights": null
  },
  "links": [
    {
      "rel": "primary",
      "url": "https://arxiv.org/abs/2610.23303"
    }
  ],
  "name": "MobileJailBench: Red Queen Jailbreak Benchmarking for Mobile Agents",
  "notes": "Reviewed the complete retained abstract and selected exact-v1 threat-model, construction and evaluation sections. Execution uses a browser-based Android-like simulator, not real Android isolation or live services. The attacker controls instructions and designated carriers, not privileged simulator state/APIs or system/model/harness internals. Rates depend on release, budget and adjudication coverage. SAF labels track observable expressions and actions, not latent reasoning; unresolved episodes are excluded from rate denominators. No independent reproduction.",
  "published_at": "2026-10-16",
  "relations": [],
  "review_status": "curated",
  "scope": "core",
  "summary": "MobileJailBench evaluates mobile-agent jailbreaks in a browser-based Android-like simulator, combining feedback-driven attack evolution, separately admitted task expansions and evidence-grounded outcome adjudication.",
  "topics": [
    "safety-security",
    "mobile-navigation",
    "evaluation",
    "observability",
    "cross-app"
  ],
  "updated_at": "2026-10-16",
  "url": "https://arxiv.org/abs/2610.23303"
}