Paper Citation Record · LEDGER

EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

As of 6 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 19 inbound Pith citation observations for arXiv:2409.11295.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2409.11295 v5

Coverage vector

measured 0 of 0 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links

measured 19 of 19 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-06T06:34:29.942622+00:00

measured 19 of 19 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-06T19:43:28.598263Z

measured 1 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-05T02:28:24.338817Z

Reference resolution

0 of 0 outbound references displayed

verified exact0
verified fuzzy0
unresolved0
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

1
pith, observed 2026-08-05T02:28:24.338817Z

Outbound references

No outbound reference observations are available for this paper version.

Pith citing papers

Observation 90382a86-16bd-467a-887a-708a98a35a8b · inbound

ASSURE: Metamorphic Testing for AI-powered Browser Extensions cites this paper.

ASSURE: Metamorphic Testing for AI-powered Browser Extensions EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-06T19:43:28.598263Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation abae9612-218d-498a-8634-014caef4db11 · inbound

WebGuard: Building a Generalizable Guardrail for Web Agents cites this paper.

WebGuard: Building a Generalizable Guardrail for Web Agents EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:49.478511Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2664bd85-e1dd-4f04-a5c9-efe47d3de940 · inbound

PromptArmor: Simple yet Effective Prompt Injection Defenses cites this paper.

PromptArmor: Simple yet Effective Prompt Injection Defenses EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-06T15:42:00.957739Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 68e1cf73-2136-49ad-b530-750830af3ca5 · inbound

OS Agents: A Survey on MLLM-based Agents for General Computing Devices Use cites this paper.

OS Agents: A Survey on MLLM-based Agents for General Computing Devices Use EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-06T00:00:31.317537Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ae5f12df-493f-4ed9-ba60-7c71131e3ff7 · inbound

Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment cites this paper.

Red-Teaming Coding Agents from a Tool-Invocation Perspective: An Empirical Security Assessment EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-05T05:09:39.868193Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 728d166f-39eb-40ab-b682-20de8a213f92 · inbound

When Compression Becomes an Attack Surface: Black-Box Attacks on Prompt-Compressed LLM Agents cites this paper.

When Compression Becomes an Attack Surface: Black-Box Attacks on Prompt-Compressed LLM Agents EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Reference 54

Resolution: unresolved; no resolver link, observed 2026-08-04T08:06:11.805883Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7d8311eb-de4a-4d8e-84f4-712762ab9bed · inbound

Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges cites this paper.

Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Reference 69

Resolution: verified exact; arxiv_id, observed 2026-05-18T03:42:22.087412Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 6c061f65-f33d-4717-992c-7a16f85f5a6a · inbound

Agents at Risk: How Users Unwittingly Undermine LLM Safety cites this paper.

Agents at Risk: How Users Unwittingly Undermine LLM Safety EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-03T10:45:18.184723Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1dca5052-1c53-465f-835c-927dc08e41e1 · inbound

Mind the Gap: Action Rebinding Attacks against Android GUI Agents cites this paper.

Mind the Gap: Action Rebinding Attacks against Android GUI Agents EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-03T09:54:57.641440Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5d242861-3a0f-417c-9a58-a7df5824c3ab · inbound

Modeling Distinct Human Interaction in Web Agents cites this paper.

Modeling Distinct Human Interaction in Web Agents EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-02T22:17:05.132343Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6ccfe973-97ea-404d-a1d6-460e3f42b1b4 · inbound

ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying cites this paper.

ADAM: A Systematic Data Extraction Attack on Agent Memory via Adaptive Querying EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Reference 13

Resolution: verified exact; arxiv_id, observed 2026-05-11T05:45:57.598580Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 0044b1e3-e3fe-4233-ba00-bd340309f7d4 · inbound

PIIGuard: Mitigating PII Harvesting under Adversarial Sanitization cites this paper.

PIIGuard: Mitigating PII Harvesting under Adversarial Sanitization EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Reference 8

Resolution: metadata mismatch; arxiv_id, observed 2026-05-11T17:11:15.332922Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 3c26c6f5-cf9a-4671-bd85-3923726c167d · inbound

ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection cites this paper.

ARGUS: Defending LLM Agents Against Context-Aware Prompt Injection EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Reference 141

Resolution: metadata mismatch; arxiv_id, observed 2026-05-11T23:56:13.822914Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 0e40d037-6bd5-41b2-a18b-f9557d0f2603 · inbound

WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections cites this paper.

WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Reference 34

Resolution: verified exact; arxiv_id, observed 2026-07-01T14:45:49.587500Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 55e884d8-c66c-42c2-b55f-62923f4267d7 · inbound

HLL: Can Agents Cross Humanity's Last Line of Verification? cites this paper.

HLL: Can Agents Cross Humanity's Last Line of Verification? EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Reference 27

Resolution: verified exact; arxiv_id, observed 2026-07-01T22:56:19.587012Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation ec0e7e28-1c72-4aeb-a31f-e010dede3038 · inbound

Domain-Conditioned Safety in Frontier Computer-Using Agents: A 793-Episode Browser Benchmark, a Coding-Domain Cross-Reference, and a Reproducibility Audit of Recent Red-Teaming cites this paper.

Domain-Conditioned Safety in Frontier Computer-Using Agents: A 793-Episode Browser Benchmark, a Coding-Domain Cross-Reference, and a Reproducibility Audit of Recent Red-Teaming EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Reference 11

Resolution: verified exact; arxiv_id, observed 2026-07-02T08:06:48.258146Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 0cf6bf26-8ebf-4f9f-82a5-5c6d0eb040fa · inbound

Same-Origin Policy for Agentic Browsers cites this paper.

Same-Origin Policy for Agentic Browsers EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Reference 8

Resolution: verified exact; arxiv_id, observed 2026-07-01T07:35:29.038091Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation 09232739-3b47-4587-adea-ada3ad50082f · inbound

Prismata: Confining Cross-Site Prompt Injection in Web Agents cites this paper.

Prismata: Confining Cross-Site Prompt Injection in Web Agents EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Reference 47

Resolution: verified exact; local_arxiv, observed 2026-07-10T12:27:04.061309Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.

Observation d4519caf-597f-4eb7-9887-0f80966b45a6 · inbound

Agent Security Needs Redefinition through a Holistic Framework cites this paper.

Agent Security Needs Redefinition through a Holistic Framework EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage

Reference 282

Resolution: unresolved; no resolver link, observed 2026-08-01T06:04:46.669935Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.