Paper Citation Record · LEDGER

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents

As of 5 August 2026, this Paper Citation Record lists 36 of 36 outbound references and 0 inbound Pith citation observations for arXiv:2606.20717.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2606.20717 v1

Coverage vector

measured 36 of 36 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-06-27T00:54:00.944706Z

measured 36 of 36 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-04T06:34:03.388597+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

36 of 36 outbound references displayed

verified exact2
verified fuzzy0
unresolved22
parse uncertain0
malformed identifier0
metadata mismatch12

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation c05800bf-0ca0-40ad-86ff-2674f9dcb64b · outbound

This paper cites Advances in Neural Information Processing Systems , year =.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Advances in Neural Information Processing Systems , year =

Reference 1

Resolution: unresolved; no resolver link, observed 2026-06-27T00:54:00.944706Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 15619ab8-10da-4431-865f-fc845fc10f43 · outbound

This paper cites WebArena: A Realistic Web Environment for Building Autonomous Agents.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents WebArena: A Realistic Web Environment for Building Autonomous Agents

Reference 2

Resolution: metadata mismatch; local_arxiv, observed 2026-07-03T21:08:58.360197Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation bd6e1152-2d86-4719-8be7-9372d10c64c2 · outbound

This paper cites Advances in Neural Information Processing Systems , year =.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Advances in Neural Information Processing Systems , year =

Reference 3

Resolution: unresolved; no resolver link, observed 2026-06-27T00:54:00.944706Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9742ac77-59af-4dc7-b8a7-cd4df9283b94 · outbound

This paper cites Proceedings of the 62nd Annual Meeting of the Association for Computational Linguistics , year =.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Proceedings of the 62nd Annual Meeting of the Association for Computational Linguistics , year =

Reference 4

Resolution: unresolved; no resolver link, observed 2026-06-27T00:54:00.944706Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8e04d2a2-d92f-4f90-845d-9ab7f54b6ae4 · outbound

This paper cites GPT-4V(ision) is a Generalist Web Agent, if Grounded.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents GPT-4V(ision) is a Generalist Web Agent, if Grounded

Reference 5

Resolution: metadata mismatch; local_arxiv, observed 2026-07-03T21:08:58.352761Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation bd8d87a1-6bcc-4cfd-84ef-01068cbd907e · outbound

This paper cites CogAgent: A Visual Language Model for GUI Agents.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents CogAgent: A Visual Language Model for GUI Agents

Reference 6

Resolution: metadata mismatch; arxiv_id, observed 2026-07-03T21:08:58.345016Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 0912cee5-28b7-4101-9176-18a00641694b · outbound

This paper cites Proceedings of the 62nd Annual Meeting of the Association for Computational Linguistics , year =.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Proceedings of the 62nd Annual Meeting of the Association for Computational Linguistics , year =

Reference 7

Resolution: unresolved; no resolver link, observed 2026-06-27T00:54:00.944706Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a61e9752-141a-4f5f-9513-355acb2bed54 · outbound

This paper cites OSWorld: Benchmarking Multimodal Agents for Open-Ended Tasks in Real Computer Environments.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents OSWorld: Benchmarking Multimodal Agents for Open-Ended Tasks in Real Computer Environments

Reference 8

Resolution: metadata mismatch; local_arxiv, observed 2026-07-03T21:08:58.347763Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 7259d5eb-e45f-44cf-a4b7-8badfad4192d · outbound

This paper cites Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection

Reference 9

Resolution: metadata mismatch; local_arxiv, observed 2026-07-03T21:08:58.350321Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 4753da78-2510-44f2-88cb-8a45ff2cc28a · outbound

This paper cites Findings of the Association for Computational Linguistics: ACL 2024 , pages =.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Findings of the Association for Computational Linguistics: ACL 2024 , pages =

Reference 10

Resolution: unresolved; no resolver link, observed 2026-06-27T00:54:00.944706Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fdeaa65b-5c6c-4bb0-a9fa-e1c79ee347cd · outbound

This paper cites Advances in Neural Information Processing Systems , year =.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Advances in Neural Information Processing Systems , year =

Reference 11

Resolution: unresolved; no resolver link, observed 2026-06-27T00:54:00.944706Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7ee8e0e5-fcc0-4bf4-bc7d-3765ba6b01b6 · outbound

This paper cites The Thirteenth International Conference on Learning Representations , year =.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents The Thirteenth International Conference on Learning Representations , year =

Reference 12

Resolution: unresolved; no resolver link, observed 2026-06-27T00:54:00.944706Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fdcf5d58-85de-494d-b78a-b9397458aa5e · outbound

This paper cites Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics , pages =.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics , pages =

Reference 13

Resolution: unresolved; no resolver link, observed 2026-06-27T00:54:00.944706Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3d91a8ab-2976-40cd-80b9-2f318ec326d7 · outbound

This paper cites AdvAgent: Controllable Blackbox Red-teaming on Web Agents.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents AdvAgent: Controllable Blackbox Red-teaming on Web Agents

Reference 14

Resolution: metadata mismatch; arxiv_id, observed 2026-07-03T21:08:58.366599Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 77148ead-2d02-4bb4-961d-6f883b2d2e5e · outbound

This paper cites Proceedings of the 42nd International Conference on Machine Learning , series =.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Proceedings of the 42nd International Conference on Machine Learning , series =

Reference 15

Resolution: unresolved; no resolver link, observed 2026-06-27T00:54:00.944706Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 22822686-94ed-400f-9069-6dea1fcc8a72 · outbound

This paper cites AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery

Reference 16

Resolution: metadata mismatch; arxiv_id, observed 2026-07-03T21:08:58.354165Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 0f392720-eb57-49df-8c47-3f72275f4ec6 · outbound

This paper cites Proceedings of the 2025 Conference on Empirical Methods in Natural Language Processing , pages =.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Proceedings of the 2025 Conference on Empirical Methods in Natural Language Processing , pages =

Reference 17

Resolution: unresolved; no resolver link, observed 2026-06-27T00:54:00.944706Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5e9a01e2-6a59-421f-91a3-95693b5f4c73 · outbound

This paper cites Visual Adversarial Examples Jailbreak Aligned Large Language Models.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Visual Adversarial Examples Jailbreak Aligned Large Language Models

Reference 18

Resolution: metadata mismatch; arxiv_id, observed 2026-07-03T21:08:58.336406Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 31f82be9-7a6e-4e6d-a307-80e3e09d17de · outbound

This paper cites Image Hijacks: Adversarial Images can Control Generative Models at Runtime.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Image Hijacks: Adversarial Images can Control Generative Models at Runtime

Reference 19

Resolution: metadata mismatch; arxiv_id, observed 2026-07-03T21:08:58.363185Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation cc4cb0ff-e5ee-42c1-af3a-e5f22f086216 · outbound

This paper cites Proceedings of the AAAI Conference on Artificial Intelligence , volume =.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Proceedings of the AAAI Conference on Artificial Intelligence , volume =

Reference 20

Resolution: unresolved; no resolver link, observed 2026-06-27T00:54:00.944706Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 447832d8-6f0d-4d03-884d-fa8ec53c79be · outbound

This paper cites Attacking multimodal os agents with malicious image patches.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Attacking multimodal os agents with malicious image patches

Reference 21

Resolution: metadata mismatch; arxiv_id, observed 2026-07-03T21:08:58.343182Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 8da1998c-dfe8-48a5-b2cc-132777169e3b · outbound

This paper cites Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops , pages =.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops , pages =

Reference 22

Resolution: unresolved; no resolver link, observed 2026-06-27T00:54:00.944706Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9cfa4b5f-ba06-42b9-b314-4c7e3ebeccf6 · outbound

This paper cites International Conference on Learning Representations , year =.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents International Conference on Learning Representations , year =

Reference 23

Resolution: unresolved; no resolver link, observed 2026-06-27T00:54:00.944706Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ada38d0b-7599-42e6-863d-f79f98005ac1 · outbound

This paper cites Diffusion-Based Adversarial Sample Generation for Improved Stealthiness and Controllability.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Diffusion-Based Adversarial Sample Generation for Improved Stealthiness and Controllability

Reference 24

Resolution: verified exact; arxiv_id, observed 2026-07-03T21:08:58.345786Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 1a04d72f-5b2b-4b15-b4a5-4f99a5816d3d · outbound

This paper cites Diffusion Models for Imperceptible and Transferable Adversarial Attack.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Diffusion Models for Imperceptible and Transferable Adversarial Attack

Reference 25

Resolution: verified exact; arxiv_id, observed 2026-07-03T21:08:58.351446Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 8f59fbb6-2a63-4732-8401-2e68b225d9a1 · outbound

This paper cites European Conference on Computer Vision , year =.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents European Conference on Computer Vision , year =

Reference 26

Resolution: unresolved; no resolver link, observed 2026-06-27T00:54:00.944706Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 067c0d60-eef9-4f71-a2e2-e59ebd714bef · outbound

This paper cites IEEE Transactions on Information Forensics and Security , year =.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents IEEE Transactions on Information Forensics and Security , year =

Reference 27

Resolution: unresolved; no resolver link, observed 2026-06-27T00:54:00.944706Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 07c368af-bfcb-485c-97dc-18c4f3cf1e17 · outbound

This paper cites Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=

Reference 28

Resolution: unresolved; no resolver link, observed 2026-06-27T00:54:00.944706Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9ecba9de-a7e6-4af4-a8a5-e9f6b8f97377 · outbound

This paper cites Phi-4-Mini Technical Report: Compact yet Powerful Multimodal Language Models via Mixture-of-LoRAs.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Phi-4-Mini Technical Report: Compact yet Powerful Multimodal Language Models via Mixture-of-LoRAs

Reference 29

Resolution: metadata mismatch; local_arxiv, observed 2026-07-03T21:08:58.348566Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 69018586-f686-4909-a6c1-bb9cd4ac2a06 · outbound

This paper cites an unresolved cited work.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Unresolved cited work

Reference 30

Resolution: unresolved; no resolver link, observed 2026-06-27T00:54:00.944706Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2ebd049b-5ef9-47af-bc1c-56ff0907142f · outbound

This paper cites The Llama 3 Herd of Models.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents The Llama 3 Herd of Models

Reference 31

Resolution: metadata mismatch; local_arxiv, observed 2026-07-03T21:08:58.357196Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.

Observation 09a7e474-6af2-4dfe-89a8-1b55c302f9b4 · outbound

This paper cites 2026 , note =.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents 2026 , note =

Reference 32

Resolution: unresolved; no resolver link, observed 2026-06-27T00:54:00.944706Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6442a056-ce3f-45eb-9f75-57ab09fae71e · outbound

This paper cites 2026 , note =.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents 2026 , note =

Reference 33

Resolution: unresolved; no resolver link, observed 2026-06-27T00:54:00.944706Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3d12b281-4a71-4e05-bf61-71a05c51804b · outbound

This paper cites Advances in neural information processing systems , volume=.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Advances in neural information processing systems , volume=

Reference 34

Resolution: unresolved; no resolver link, observed 2026-06-27T00:54:00.944706Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 92287e77-5bde-43ad-a5b4-4007f2e72b5d · outbound

This paper cites Advances in Neural Information Processing Systems , volume=.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Advances in Neural Information Processing Systems , volume=

Reference 35

Resolution: unresolved; no resolver link, observed 2026-06-27T00:54:00.944706Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b695790d-5a90-491f-b1fc-850ac4e673a9 · outbound

This paper cites Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=.

MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=

Reference 36

Resolution: unresolved; no resolver link, observed 2026-06-27T00:54:00.944706Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

No inbound Pith citation observations are available.