Paper Citation Record · LEDGER

Attacking Vision-Language Computer Agents via Pop-ups

As of 14 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 25 inbound Pith citation observations for arXiv:2411.02391.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2411.02391 v2

Coverage vector

measured 0 of 0 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links

measured 25 of 25 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-14T06:32:32.682623+00:00

measured 25 of 25 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-11T05:06:49.729303Z

measured 1 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-05T02:28:24.338817Z

Reference resolution

0 of 0 outbound references displayed

verified exact0
verified fuzzy0
unresolved0
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

0
pith, observed 2026-08-05T02:28:24.338817Z

Outbound references

No outbound reference observations are available for this paper version.

Pith citing papers

Observation 2fa52eb3-2e20-4373-b088-394b10bb56ac · inbound

AutoDroid-V2: Boosting SLM-based GUI Agents via Code Generation cites this paper.

AutoDroid-V2: Boosting SLM-based GUI Agents via Code Generation Attacking Vision-Language Computer Agents via Pop-ups

Reference 48

Resolution: unresolved; no resolver link, observed 2026-08-11T05:06:49.729303Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 27182ec8-d805-4145-a0f5-abbb8ce74d72 · inbound

Progent: Securing AI Agents with Privilege Control cites this paper.

Progent: Securing AI Agents with Privilege Control Attacking Vision-Language Computer Agents via Pop-ups

Reference 73

Resolution: verified exact; arxiv_id, observed 2026-05-22T21:12:08.519192Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation 46373db7-78df-4a76-b062-6c08040f8c11 · inbound

EVA: Evolving Semantic Adversaries for Red-Teaming GUI Agents Against Environmental Injection Attacks cites this paper.

EVA: Evolving Semantic Adversaries for Red-Teaming GUI Agents Against Environmental Injection Attacks Attacking Vision-Language Computer Agents via Pop-ups

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-07T15:41:21.338499Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 788665c1-1e45-4c88-aaf9-b361feaadfa8 · inbound

SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator cites this paper.

SafeAgent: Safeguarding LLM Agents via an Automated Risk Simulator Attacking Vision-Language Computer Agents via Pop-ups

Reference 39

Resolution: unresolved; no resolver link, observed 2026-08-07T14:44:48.689068Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a8bb3688-7ea9-44aa-b4e6-28b1a804b001 · inbound

Superplatforms Have to Attack AI Agents cites this paper.

Superplatforms Have to Attack AI Agents Attacking Vision-Language Computer Agents via Pop-ups

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-07T14:42:38.645474Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 22c533b9-0d1d-4f0b-9559-2b9eb12de8af · inbound

AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery cites this paper.

AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery Attacking Vision-Language Computer Agents via Pop-ups

Reference 46

Resolution: unresolved; no resolver link, observed 2026-08-07T13:32:47.969437Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f232dac0-63ab-4f5c-ad68-c9c6f86410e4 · inbound

RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents cites this paper.

RiOSWorld: Benchmarking the Risk of Multimodal Computer-Use Agents Attacking Vision-Language Computer Agents via Pop-ups

Reference 55

Resolution: unresolved; no resolver link, observed 2026-08-07T12:06:27.951327Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3b7793aa-899f-4e01-a6d7-aa9c8c496f5e · inbound

A Red Teaming Roadmap Towards System-Level Safety cites this paper.

A Red Teaming Roadmap Towards System-Level Safety Attacking Vision-Language Computer Agents via Pop-ups

Reference 104

Resolution: unresolved; no resolver link, observed 2026-08-07T12:11:26.307178Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 14ea2d07-feb1-4b1d-90b2-3989b43dcdde · inbound

Mirage-1: Augmenting and Updating GUI Agent with Hierarchical Multimodal Skills cites this paper.

Mirage-1: Augmenting and Updating GUI Agent with Hierarchical Multimodal Skills Attacking Vision-Language Computer Agents via Pop-ups

Reference 44

Resolution: unresolved; no resolver link, observed 2026-08-07T04:35:39.259264Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8a5f0f52-67b2-4554-a6b8-26260ebf08cb · inbound

Agent-RewardBench: Towards a Unified Benchmark for Reward Modeling across Perception, Planning, and Safety in Real-World Multimodal Agents cites this paper.

Agent-RewardBench: Towards a Unified Benchmark for Reward Modeling across Perception, Planning, and Safety in Real-World Multimodal Agents Attacking Vision-Language Computer Agents via Pop-ups

Reference 41

Resolution: unresolved; no resolver link, observed 2026-08-06T22:36:45.668547Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8538ec90-4c8d-49ae-a9f0-641769fd7a1d · inbound

LLM Agents Are the Antidote to Walled Gardens cites this paper.

LLM Agents Are the Antidote to Walled Gardens Attacking Vision-Language Computer Agents via Pop-ups

Reference 106

Resolution: verified exact; arxiv_id, observed 2026-05-22T00:44:29.323746Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation 16678d5c-d80f-4e86-8c4e-24800839c19c · inbound

Mobile GUI Agents under Real-world Threats: Are We There Yet? cites this paper.

Mobile GUI Agents under Real-world Threats: Are We There Yet? Attacking Vision-Language Computer Agents via Pop-ups

Reference 36

Resolution: verified exact; arxiv_id, observed 2026-05-19T07:02:07.903154Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation c3854d46-ccb8-49f1-8a80-19c22dfa3024 · inbound

LaSM: Layer-wise Scaling Mechanism for Defending Pop-up Attack on GUI Agents cites this paper.

LaSM: Layer-wise Scaling Mechanism for Defending Pop-up Attack on GUI Agents Attacking Vision-Language Computer Agents via Pop-ups

Reference 11

Resolution: verified exact; arxiv_id, observed 2026-05-19T04:12:02.174777Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation deb16fda-5796-4beb-8290-da7d3a6c2079 · inbound

WebGuard: Building a Generalizable Guardrail for Web Agents cites this paper.

WebGuard: Building a Generalizable Guardrail for Web Agents Attacking Vision-Language Computer Agents via Pop-ups

Reference 54

Resolution: unresolved; no resolver link, observed 2026-08-06T16:12:51.576325Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2fa0340b-5ae2-4a86-bb6e-c55395cc9725 · inbound

MIRAGE-Bench: LLM Agent is Hallucinating and Where to Find Them cites this paper.

MIRAGE-Bench: LLM Agent is Hallucinating and Where to Find Them Attacking Vision-Language Computer Agents via Pop-ups

Reference 42

Resolution: unresolved; no resolver link, observed 2026-08-06T13:06:40.188635Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 20da66b8-b2a9-454a-842d-1e40c3fa04d9 · inbound

AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents cites this paper.

AgentSentinel: An End-to-End and Real-Time Security Defense Framework for Computer-Use Agents Attacking Vision-Language Computer Agents via Pop-ups

Reference 52

Resolution: unresolved; no resolver link, observed 2026-08-04T21:44:12.467965Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5dacde04-0c77-4eb8-926a-8fb450e972c5 · inbound

SecureWebArena: A Holistic Security Evaluation Benchmark for LVLM-based Web Agents cites this paper.

SecureWebArena: A Holistic Security Evaluation Benchmark for LVLM-based Web Agents Attacking Vision-Language Computer Agents via Pop-ups

Reference 66

Resolution: verified exact; arxiv_id, observed 2026-05-18T08:16:06.585253Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation 8d7e0c16-d531-421f-8623-e0cd529e30c0 · inbound

Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges cites this paper.

Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges Attacking Vision-Language Computer Agents via Pop-ups

Reference 73

Resolution: verified exact; arxiv_id, observed 2026-05-18T03:42:21.952673Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation b93f3110-dcd8-4a69-b6f1-c34dd5be42c6 · inbound

Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels cites this paper.

Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels Attacking Vision-Language Computer Agents via Pop-ups

Reference 90

Resolution: unresolved; no resolver link, observed 2026-08-04T07:06:38.159564Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 275c9b65-ec56-42e9-904f-13db825cef52 · inbound

WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections cites this paper.

WARD: Adversarially Robust Defense of Web Agents Against Prompt Injections Attacking Vision-Language Computer Agents via Pop-ups

Reference 80

Resolution: verified exact; arxiv_id, observed 2026-07-01T14:45:49.592478Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation 57d28757-90a0-4d8f-af78-74e65918f1e9 · inbound

Domain-Conditioned Safety in Frontier Computer-Using Agents: A 793-Episode Browser Benchmark, a Coding-Domain Cross-Reference, and a Reproducibility Audit of Recent Red-Teaming cites this paper.

Domain-Conditioned Safety in Frontier Computer-Using Agents: A 793-Episode Browser Benchmark, a Coding-Domain Cross-Reference, and a Reproducibility Audit of Recent Red-Teaming Attacking Vision-Language Computer Agents via Pop-ups

Reference 23

Resolution: metadata mismatch; arxiv_id, observed 2026-07-02T08:06:48.253773Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation 8d864f71-1323-4519-97a2-f8f83b751798 · inbound

Signal-Driven Observation for Long-Horizon Web Agents cites this paper.

Signal-Driven Observation for Long-Horizon Web Agents Attacking Vision-Language Computer Agents via Pop-ups

Reference 30

Resolution: verified exact; arxiv_id, observed 2026-06-28T01:31:29.214061Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation b48dd635-ad0f-426b-98ff-406ba3abe0f7 · inbound

Same-Origin Policy for Agentic Browsers cites this paper.

Same-Origin Policy for Agentic Browsers Attacking Vision-Language Computer Agents via Pop-ups

Reference 7

Resolution: verified exact; arxiv_id, observed 2026-07-01T07:35:29.028043Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation e4cb4ee9-5f1b-4149-9cf8-5b7143bff42b · inbound

Prismata: Confining Cross-Site Prompt Injection in Web Agents cites this paper.

Prismata: Confining Cross-Site Prompt Injection in Web Agents Attacking Vision-Language Computer Agents via Pop-ups

Reference 99

Resolution: verified exact; local_arxiv, observed 2026-07-10T12:27:04.206424Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.

Observation 9d3f20fe-2bd1-4cbb-ab33-2e0f246a50b8 · inbound

Agent Security Needs Redefinition through a Holistic Framework cites this paper.

Agent Security Needs Redefinition through a Holistic Framework Attacking Vision-Language Computer Agents via Pop-ups

Reference 285

Resolution: unresolved; no resolver link, observed 2026-08-01T06:04:46.684540Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.