Showing cs.CRShow all
2 papers · 1 filter
cs.CR2026
Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents
Wei Zou, Mingwen Dong, Miguel Romero Calvo +7
Memory makes LLM-based web agents personalized, powerful, yet exploitable. By storing past interactions to personalize future tasks, agents inadvertently create a persistent attack…
cs.CR2025
STAC: When Innocent Tools Form Dangerous Chains for LLM Agents
Jing-Jing Li, Jianfeng He, Chao Shang +6
As LLMs advance into autonomous agents with tool-use capabilities, they introduce security challenges that extend beyond traditional content-based LLM safety concerns. This paper i…