{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:5CGAGGQWUYY5R4IJK323OCUKNT","short_pith_number":"pith:5CGAGGQW","canonical_record":{"source":{"id":"2409.11295","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-17T15:49:44Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"419a22504a0d11cc9b3b27b7970d38369c169864f63b426a9ba5f9bad342af59","abstract_canon_sha256":"e6daf534874b307b14703140563e1a49fd6ebb4bc7c1fcf5e50ad503c0826f35"},"schema_version":"1.0"},"canonical_sha256":"e88c031a16a631d8f10956f5b70a8a6cfa2671c3b6c8d20707fdb5f5235d125d","source":{"kind":"arxiv","id":"2409.11295","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.11295","created_at":"2026-07-05T10:30:01Z"},{"alias_kind":"arxiv_version","alias_value":"2409.11295v5","created_at":"2026-07-05T10:30:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.11295","created_at":"2026-07-05T10:30:01Z"},{"alias_kind":"pith_short_12","alias_value":"5CGAGGQWUYY5","created_at":"2026-07-05T10:30:01Z"},{"alias_kind":"pith_short_16","alias_value":"5CGAGGQWUYY5R4IJ","created_at":"2026-07-05T10:30:01Z"},{"alias_kind":"pith_short_8","alias_value":"5CGAGGQW","created_at":"2026-07-05T10:30:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:5CGAGGQWUYY5R4IJK323OCUKNT","target":"record","payload":{"canonical_record":{"source":{"id":"2409.11295","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-17T15:49:44Z","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"title_canon_sha256":"419a22504a0d11cc9b3b27b7970d38369c169864f63b426a9ba5f9bad342af59","abstract_canon_sha256":"e6daf534874b307b14703140563e1a49fd6ebb4bc7c1fcf5e50ad503c0826f35"},"schema_version":"1.0"},"canonical_sha256":"e88c031a16a631d8f10956f5b70a8a6cfa2671c3b6c8d20707fdb5f5235d125d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:30:01.865364Z","signature_b64":"aPYRblz8gliE20y+uoWO0z2XBNx1FOG5J01P671pP+wzSNjmonEY+/yvgsAzOo4lnT5rOcOTPif0Xy78vWaMAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e88c031a16a631d8f10956f5b70a8a6cfa2671c3b6c8d20707fdb5f5235d125d","last_reissued_at":"2026-07-05T10:30:01.864791Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:30:01.864791Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.11295","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:30:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"O+FMzv73sXIuz6WJGJJ64dvRsIRn5+q1S73y1h88fLUkusFeGgSXZ1HmCfAEZcHRhr/TRG97i6Vyhq8KZP08CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T00:58:27.455651Z"},"content_sha256":"557678ec94fd672d54dedebc536fd17c33c4332183dc3e97df675e81f2272e09","schema_version":"1.0","event_id":"sha256:557678ec94fd672d54dedebc536fd17c33c4332183dc3e97df675e81f2272e09"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:5CGAGGQWUYY5R4IJK323OCUKNT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.LG"],"primary_cat":"cs.CR","authors_text":"Bo Li, Chaowei Xiao, Chejian Xu, Huan Sun, Jiawei Zhang, Lingbo Mo, Mintong Kang, Yuan Tian, Zeyi Liao","submitted_at":"2024-09-17T15:49:44Z","abstract_excerpt":"Generalist web agents have demonstrated remarkable potential in autonomously completing a wide range of tasks on real websites, significantly boosting human productivity. However, web tasks, such as booking flights, usually involve users' PII, which may be exposed to potential privacy risks if web agents accidentally interact with compromised websites, a scenario that remains largely unexplored in the literature. In this work, we narrow this gap by conducting the first study on the privacy risks of generalist web agents in adversarial environments. First, we present a realistic threat model fo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.11295","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.11295/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:30:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SZJg1aUWb4giDtyLR3pxcNrVGdnSS5uZV5Gop5Q2LzlVLN+BYykl1SmvUjeJFEtq8v8ffxqU6ByCb/cW4fhpAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T00:58:27.456537Z"},"content_sha256":"df2ac4a66cf0e9411e34a7726e4f0c818550f722828d39cbadd22a2bd7aad5e8","schema_version":"1.0","event_id":"sha256:df2ac4a66cf0e9411e34a7726e4f0c818550f722828d39cbadd22a2bd7aad5e8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5CGAGGQWUYY5R4IJK323OCUKNT/bundle.json","state_url":"https://pith.science/pith/5CGAGGQWUYY5R4IJK323OCUKNT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5CGAGGQWUYY5R4IJK323OCUKNT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T00:58:27Z","links":{"resolver":"https://pith.science/pith/5CGAGGQWUYY5R4IJK323OCUKNT","bundle":"https://pith.science/pith/5CGAGGQWUYY5R4IJK323OCUKNT/bundle.json","state":"https://pith.science/pith/5CGAGGQWUYY5R4IJK323OCUKNT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5CGAGGQWUYY5R4IJK323OCUKNT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:5CGAGGQWUYY5R4IJK323OCUKNT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e6daf534874b307b14703140563e1a49fd6ebb4bc7c1fcf5e50ad503c0826f35","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-17T15:49:44Z","title_canon_sha256":"419a22504a0d11cc9b3b27b7970d38369c169864f63b426a9ba5f9bad342af59"},"schema_version":"1.0","source":{"id":"2409.11295","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.11295","created_at":"2026-07-05T10:30:01Z"},{"alias_kind":"arxiv_version","alias_value":"2409.11295v5","created_at":"2026-07-05T10:30:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.11295","created_at":"2026-07-05T10:30:01Z"},{"alias_kind":"pith_short_12","alias_value":"5CGAGGQWUYY5","created_at":"2026-07-05T10:30:01Z"},{"alias_kind":"pith_short_16","alias_value":"5CGAGGQWUYY5R4IJ","created_at":"2026-07-05T10:30:01Z"},{"alias_kind":"pith_short_8","alias_value":"5CGAGGQW","created_at":"2026-07-05T10:30:01Z"}],"graph_snapshots":[{"event_id":"sha256:df2ac4a66cf0e9411e34a7726e4f0c818550f722828d39cbadd22a2bd7aad5e8","target":"graph","created_at":"2026-07-05T10:30:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.11295/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Generalist web agents have demonstrated remarkable potential in autonomously completing a wide range of tasks on real websites, significantly boosting human productivity. However, web tasks, such as booking flights, usually involve users' PII, which may be exposed to potential privacy risks if web agents accidentally interact with compromised websites, a scenario that remains largely unexplored in the literature. In this work, we narrow this gap by conducting the first study on the privacy risks of generalist web agents in adversarial environments. First, we present a realistic threat model fo","authors_text":"Bo Li, Chaowei Xiao, Chejian Xu, Huan Sun, Jiawei Zhang, Lingbo Mo, Mintong Kang, Yuan Tian, Zeyi Liao","cross_cats":["cs.AI","cs.CL","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-17T15:49:44Z","title":"EIA: Environmental Injection Attack on Generalist Web Agents for Privacy Leakage"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.11295","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:557678ec94fd672d54dedebc536fd17c33c4332183dc3e97df675e81f2272e09","target":"record","created_at":"2026-07-05T10:30:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e6daf534874b307b14703140563e1a49fd6ebb4bc7c1fcf5e50ad503c0826f35","cross_cats_sorted":["cs.AI","cs.CL","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-17T15:49:44Z","title_canon_sha256":"419a22504a0d11cc9b3b27b7970d38369c169864f63b426a9ba5f9bad342af59"},"schema_version":"1.0","source":{"id":"2409.11295","kind":"arxiv","version":5}},"canonical_sha256":"e88c031a16a631d8f10956f5b70a8a6cfa2671c3b6c8d20707fdb5f5235d125d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e88c031a16a631d8f10956f5b70a8a6cfa2671c3b6c8d20707fdb5f5235d125d","first_computed_at":"2026-07-05T10:30:01.864791Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:30:01.864791Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"aPYRblz8gliE20y+uoWO0z2XBNx1FOG5J01P671pP+wzSNjmonEY+/yvgsAzOo4lnT5rOcOTPif0Xy78vWaMAA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:30:01.865364Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.11295","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:557678ec94fd672d54dedebc536fd17c33c4332183dc3e97df675e81f2272e09","sha256:df2ac4a66cf0e9411e34a7726e4f0c818550f722828d39cbadd22a2bd7aad5e8"],"state_sha256":"3f1ab9b4c7607ae1dd6920989543b16f60aefb294d43cb8aabff273662019de0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GeACWmxZdWzLtXuFkd15S/hzjsyrUrj0o+WTFaKj0xPuDDITMZHODs4NQXAjZyMVlEVXcK1UUu8eoD4CB5PIDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T00:58:27.462240Z","bundle_sha256":"9397699e80cba8f078db1ed9ad7717d8e0bad0b693d14fcc0e1b093a8254cd56"}}