MobileInject: Evaluating Reasoning-to-Action Security of MLLM-Based Mobile Agents under Cross-Modal Consistency Injection

MobileInject evaluates visual/textual observation injection in stateful Android workflows using resettable emulators, benign/adversarial state oracles and trace-based diagnosis of emitted rationales and actions.

AI-assisted editorial review against a primary source. This is a catalog annotation, not an independent reproduction or endorsement.

What is this resource?

Resource type

Research papers

Environment

android

Topics

safety-security, mobile-navigation, evaluation, observability, cross-app

Record publication date

2026-10-16

Evidence retrieved

2026-10-20T08:27:26.236797+00:00

Resource ID

arxiv:2610.23307

Recorded paper version

arXiv v1

Version updated: 2026-10-16T11:10:30Z.

This identifies the retained arXiv metadata snapshot; newly observed changes require separate review.

Authors

Songping Wang, Peiyang Li, Yi Huang, Fengting Li, Xuhao Ran, Yueming Lyu, Chao Feng, Caifeng Shan

Cite this paper

Download BibTeX · Download CSL JSON

Citations preserve the selected source edition, its authors and recorded date precision. Unrecorded venues and identifiers are omitted.

Explore related topics

Scope and limitations

Reviewed the complete abstract and selected v1 construction, threat-model and evaluation sections. The attacker modifies observation surfaces, not system instructions, model parameters or the OS. State oracles are distinct from emitted-rationale diagnoses, whose labels include outcome-dependent constraints. Those diagnostics are not independent evidence of hidden-reasoning causality. No reproduction or release verification.

Primary evidence and verification

Source retrieval is separate from experiment reproduction. Use the original publication or publisher page when citing claims about the resource.

1. arxiv api

   Retrieved 2026-10-20T05:52:01Z. Supports: name, authors, published_at, updated_at, identifiers.arxiv, details.arxiv_snapshot.

   Content fingerprint

   63e37cd26bfe69455a3fa835f3d6ba4cfcc5bb7dc91f90505920d37b1e08f0b6
2. editorial primary review

   Retrieved 2026-10-20T08:27:26.236797+00:00. Supports: name, kind, scope.

   Content fingerprint

   80bed80786f939973d0d13b4f892300fee02a6110e326247131fc83d257796de
3. editorial primary review

   Retrieved 2026-10-20T09:17:36.223826+00:00. Supports: summary, environments, topics, scope, notes.

   Content fingerprint

   3803984a185b6258276b87b87ac1991583878fb41dc22618ff743f6f69c7bc7e

Suggest a correction

Open a source-backed correction. Include this record ID and the original source. Read our editorial policy and coverage boundaries.