Showing 2025 · cs.CRShow all
3 papers · 2 filters
cs.CR2025
Cross-User Poisoning: User-Task Boundary Failures in Multi-User Collaborative Language Agents
Atharv Singh Patlan, Peiyao Sheng, S. Ashwin Hebbar +2
Language agents are moving from single-user assistants to shared collaborators in workspaces, forums, and group chats. A shared agent observes interleaved messages from multiple us…
cs.CR2025
Context manipulation attacks : Web agents are susceptible to corrupted memory
Atharv Singh Patlan, Ashwin Hebbar, Pramod Viswanath +1
Autonomous web navigation agents, which translate natural language instructions into sequences of browser actions, are increasingly deployed for complex tasks across e-commerce, in…
cs.CR2025
Real AI Agents with Fake Memories: Fatal Context Manipulation Attacks on Web3 Agents
Atharv Singh Patlan, Peiyao Sheng, S. Ashwin Hebbar +2
AI agents integrated with Web3 offer autonomy and openness but raise security concerns as they interact with financial protocols and immutable smart contracts. This paper investiga…