Paper Citation Record · LEDGER

Hallucination as Exploit: Evidence-Carrying Multimodal Agents

As of 19 August 2026, this Paper Citation Record lists 27 of 27 outbound references and 2 inbound Pith citation observations for arXiv:2605.19192.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2605.19192 v2

Coverage vector

measured 27 of 27 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-05-22T08:57:29.491043Z

measured 29 of 29 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-19T06:32:44.657259+00:00

measured 2 of 2 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-02T08:47:00.150429Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

27 of 27 outbound references displayed

verified exact6
verified fuzzy16
unresolved2
parse uncertain0
malformed identifier0
metadata mismatch3

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation b8597c6b-39b5-488e-850b-b3bb1698d3d1 · outbound

This paper cites Proceedings of the 2018 Conference on Empirical Methods in Natural Language Processing , year =.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents Proceedings of the 2018 Conference on Empirical Methods in Natural Language Processing , year =

Reference 1

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T09:01:21.529353Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 88601407-b67f-466b-939d-945c3a6c4bfc · outbound

This paper cites Evaluating Object Hallucination in Large Vision-Language Models.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents Evaluating Object Hallucination in Large Vision-Language Models

Reference 2

Resolution: verified exact; local_arxiv, observed 2026-05-22T09:01:20.102941Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 2b397e4f-7475-4a41-aae4-da758462c081 · outbound

This paper cites 2024 , eprint =.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents 2024 , eprint =

Reference 3

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T09:01:21.524099Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 1cc36f95-db99-4279-8ee8-bcc5fe0800ed · outbound

This paper cites More Thinking, Less Seeing? Assessing Amplified Hallucination in Multimodal Reasoning Models.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents More Thinking, Less Seeing? Assessing Amplified Hallucination in Multimodal Reasoning Models

Reference 4

Resolution: verified exact; arxiv_id, observed 2026-05-22T09:01:20.093989Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 457315fe-e4d2-43f4-948f-9cd069114922 · outbound

This paper cites an unresolved cited work.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents Unresolved cited work

Reference 5

Resolution: unresolved; raw_fallback, observed 2026-05-22T09:01:21.540139Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation c1e9586f-6054-4bec-8384-605469d7052c · outbound

This paper cites 2022 , eprint =.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents 2022 , eprint =

Reference 6

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T09:01:21.532777Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation bd7ba131-d70b-4576-bd2a-dbef38c8cd13 · outbound

This paper cites Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection

Reference 7

Resolution: verified exact; local_arxiv, observed 2026-05-22T09:01:20.118099Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 37c91339-e6ee-4f0d-a953-64b7410774ae · outbound

This paper cites Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents Abusing Images and Sounds for Indirect Instruction Injection in Multi-Modal LLMs

Reference 8

Resolution: verified exact; arxiv_id, observed 2026-05-22T09:01:19.902347Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 171bcf0e-b563-4282-aa1a-a7237964b3d9 · outbound

This paper cites Advances in Neural Information Processing Systems , volume =.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents Advances in Neural Information Processing Systems , volume =

Reference 9

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T09:01:21.512776Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 0074eb02-8e89-4ceb-81d6-37bbaa9f4e12 · outbound

This paper cites 2025 , publisher =.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents 2025 , publisher =

Reference 10

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T09:01:21.500187Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation c1960355-4151-451c-9934-ab37d5d17a7e · outbound

This paper cites AgentDyn: Are Your Agent Security Defenses Deployable in Real-World Dynamic Environments?.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents AgentDyn: Are Your Agent Security Defenses Deployable in Real-World Dynamic Environments?

Reference 11

Resolution: metadata mismatch; local_arxiv, observed 2026-05-22T09:01:20.124476Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 98cfa3e5-42b9-4433-8cf3-26e2188d0f20 · outbound

This paper cites 2026 , eprint =.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents 2026 , eprint =

Reference 12

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T09:01:21.505309Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation d44f66e0-cfef-4cdc-b84b-b769a5bd773c · outbound

This paper cites AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents AgentVigil: Generic Black-Box Red-teaming for Indirect Prompt Injection against LLM Agents

Reference 13

Resolution: verified exact; arxiv_id, observed 2026-05-22T09:01:19.894756Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 9ba8124f-19fb-4857-8068-ac007779b074 · outbound

This paper cites Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models

Reference 14

Resolution: metadata mismatch; arxiv_id, observed 2026-05-22T09:01:20.110761Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation a7576c63-1302-44cd-af45-633819c47b1d · outbound

This paper cites LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge

Reference 15

Resolution: verified exact; arxiv_id, observed 2026-05-22T09:01:20.082441Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation de08f1cb-29b5-448e-aaeb-09ed71098df5 · outbound

This paper cites Design Patterns for Securing.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents Design Patterns for Securing

Reference 16

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T09:01:21.494738Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 6c43b361-a0cc-4a62-a990-714dc34d3efd · outbound

This paper cites Securing.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents Securing

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T09:01:21.517567Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 1224bfce-295a-4d25-8b1f-4281c615ec10 · outbound

This paper cites 2025 , eprint =.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents 2025 , eprint =

Reference 18

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T09:01:21.536633Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 2a630649-5fcf-4ddf-b75b-c823a9897985 · outbound

This paper cites Progent: Securing AI Agents with Privilege Control.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents Progent: Securing AI Agents with Privilege Control

Reference 19

Resolution: metadata mismatch; local_arxiv, observed 2026-05-22T09:01:20.132950Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 6c872e1d-2c21-4b7c-923c-00ff45e346c4 · outbound

This paper cites 2025 , eprint =.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents 2025 , eprint =

Reference 20

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T09:01:21.567265Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 029e7290-166c-489e-9277-117456e85e16 · outbound

This paper cites The Task Shield: Enforcing Task Alignment to Defend Against Indirect Prompt Injection in.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents The Task Shield: Enforcing Task Alignment to Defend Against Indirect Prompt Injection in

Reference 21

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T09:01:21.576529Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 20f45bb4-bb1d-4f8f-ba97-6850acf59f56 · outbound

This paper cites 2024 , eprint =.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents 2024 , eprint =

Reference 22

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T09:01:21.558921Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 62bf7934-99c7-4691-97c7-5ef46cb57541 · outbound

This paper cites Proceedings of the 62nd Annual Meeting of the Association for Computational Linguistics , year =.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents Proceedings of the 62nd Annual Meeting of the Association for Computational Linguistics , year =

Reference 23

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T09:01:21.553230Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation d82d27ac-2be4-417d-a829-59b5d08496c0 · outbound

This paper cites 2024 , eprint =.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents 2024 , eprint =

Reference 24

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T09:01:21.563232Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 512903c1-2da3-40ae-b16c-ded273df37f1 · outbound

This paper cites an unresolved cited work.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents Unresolved cited work

Reference 25

Resolution: unresolved; raw_fallback, observed 2026-05-22T09:01:21.571377Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 54d76a6a-a5f3-4175-9508-2423653ec82c · outbound

This paper cites Image-based Prompt Injection: Hijacking Multimodal.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents Image-based Prompt Injection: Hijacking Multimodal

Reference 26

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T09:01:21.580857Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation fc0daa60-7d60-415b-ac22-1c80011c5d44 · outbound

This paper cites 2026 , eprint =.

Hallucination as Exploit: Evidence-Carrying Multimodal Agents 2026 , eprint =

Reference 27

Resolution: verified fuzzy; raw_fallback, observed 2026-05-22T09:01:21.549145Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Pith citing papers

Observation 8fb221eb-f7ef-43c0-a963-2f526e4a329e · inbound

Do GUI Agents Believe Their Eyes? Diagnosing State-Belief Reliance on Pixels versus Structure cites this paper.

Do GUI Agents Believe Their Eyes? Diagnosing State-Belief Reliance on Pixels versus Structure Hallucination as Exploit: Evidence-Carrying Multimodal Agents

Reference 25

Resolution: unresolved; no resolver link, observed 2026-07-11T20:00:19.123214Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2028c1b9-7883-4914-b5a4-9d0cea7808d9 · inbound

Do GUI Agents Believe Their Eyes? Diagnosing State-Belief Reliance on Pixels versus Structure cites this paper.

Do GUI Agents Believe Their Eyes? Diagnosing State-Belief Reliance on Pixels versus Structure Hallucination as Exploit: Evidence-Carrying Multimodal Agents

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-02T08:47:00.150429Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.