Updated 12/30/2025
Large Language Model (LLM) agents operating in stateful environments (web browsers, operating systems, and tool-use contexts) are vulnerable to indirect prompt injection and multi-modal adversarial attacks. These vulnerabilities arise when agents process untrusted environmental observations—such as web accessibility trees, screen screenshots, or database query results—that contain concealed malicious instructions. Specifically, attackers can embed prompt injections into HTML accessibility…
DoomArena: A Framework for Testing AI Agents Against Evolving Security Threats
Affects: GPT-4o, GPT-4o Mini, Claude 3.5 Sonnet +2 more
Source: arXiv