{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2025:AJN4JMUHRGRELNX56CULS7UT35","short_pith_number":"pith:AJN4JMUH","schema_version":"1.0","canonical_sha256":"025bc4b28789a245b6fdf0a8b97e93df5b9d6c1c1c04520cd9234cb5740ae2db","source":{"kind":"arxiv","id":"2507.05445","version":1},"attestation_state":"computed","paper":{"title":"A Systematization of Security Vulnerabilities in Computer Use Agents","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Amanda Minnich, Blake Bullwinkel, Daniel Jones, Gary Lopez, Giorgio Severi, Joris de Gruyter, Justin Song, Martin Pouliot, Pamela Cortez, Santiago Zanella-Beguelin","submitted_at":"2025-07-07T19:50:21Z","abstract_excerpt":"Computer Use Agents (CUAs), autonomous systems that interact with software interfaces via browsers or virtual machines, are rapidly being deployed in consumer and enterprise environments. These agents introduce novel attack surfaces and trust boundaries that are not captured by traditional threat models. Despite their growing capabilities, the security boundaries of CUAs remain poorly understood. In this paper, we conduct a systematic threat analysis and testing of real-world CUAs under adversarial conditions. We identify seven classes of risks unique to the CUA paradigm, and analyze three con"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2507.05445","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-07-07T19:50:21Z","cross_cats_sorted":[],"title_canon_sha256":"79d6e5ca8d3b1bde545760b3ccc9c3e8046269c9771c5be450cb5da9a60885a5","abstract_canon_sha256":"a3947301cf6e9c75815dc8a4cc188d535cfd955443c3727458001f5fdfa1c6af"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:33:30.568024Z","signature_b64":"zptqwUM+vRKbiFjiGZgu/2pYMO3AuENagHmE8EtV3LwYhLNv+29N1VSDYti2y0mnK5tKj37G9y5lCCUC0iszAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"025bc4b28789a245b6fdf0a8b97e93df5b9d6c1c1c04520cd9234cb5740ae2db","last_reissued_at":"2026-07-05T11:33:30.567543Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:33:30.567543Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"A Systematization of Security Vulnerabilities in Computer Use Agents","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Amanda Minnich, Blake Bullwinkel, Daniel Jones, Gary Lopez, Giorgio Severi, Joris de Gruyter, Justin Song, Martin Pouliot, Pamela Cortez, Santiago Zanella-Beguelin","submitted_at":"2025-07-07T19:50:21Z","abstract_excerpt":"Computer Use Agents (CUAs), autonomous systems that interact with software interfaces via browsers or virtual machines, are rapidly being deployed in consumer and enterprise environments. These agents introduce novel attack surfaces and trust boundaries that are not captured by traditional threat models. Despite their growing capabilities, the security boundaries of CUAs remain poorly understood. In this paper, we conduct a systematic threat analysis and testing of real-world CUAs under adversarial conditions. We identify seven classes of risks unique to the CUA paradigm, and analyze three con"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.05445","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.05445/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2507.05445","created_at":"2026-07-05T11:33:30.567602+00:00"},{"alias_kind":"arxiv_version","alias_value":"2507.05445v1","created_at":"2026-07-05T11:33:30.567602+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.05445","created_at":"2026-07-05T11:33:30.567602+00:00"},{"alias_kind":"pith_short_12","alias_value":"AJN4JMUHRGRE","created_at":"2026-07-05T11:33:30.567602+00:00"},{"alias_kind":"pith_short_16","alias_value":"AJN4JMUHRGRELNX5","created_at":"2026-07-05T11:33:30.567602+00:00"},{"alias_kind":"pith_short_8","alias_value":"AJN4JMUH","created_at":"2026-07-05T11:33:30.567602+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":3,"internal_anchor_count":0,"sample":[{"citing_arxiv_id":"2606.05233","citing_title":"Domain-Conditioned Safety in Frontier Computer-Using Agents: A 793-Episode Browser Benchmark, a Coding-Domain Cross-Reference, and a Reproducibility Audit of Recent Red-Teaming","ref_index":7,"is_internal_anchor":false},{"citing_arxiv_id":"2606.10749","citing_title":"Toward Secure LLM Agents: Threat Surfaces, Attacks, Defenses, and Evaluation","ref_index":82,"is_internal_anchor":false},{"citing_arxiv_id":"2605.07110","citing_title":"Securing Computer-Use Agents: A Unified Architecture-Lifecycle Framework for Deployment-Grounded Reliability","ref_index":153,"is_internal_anchor":false}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/AJN4JMUHRGRELNX56CULS7UT35","json":"https://pith.science/pith/AJN4JMUHRGRELNX56CULS7UT35.json","graph_json":"https://pith.science/api/pith-number/AJN4JMUHRGRELNX56CULS7UT35/graph.json","events_json":"https://pith.science/api/pith-number/AJN4JMUHRGRELNX56CULS7UT35/events.json","paper":"https://pith.science/paper/AJN4JMUH"},"agent_actions":{"view_html":"https://pith.science/pith/AJN4JMUHRGRELNX56CULS7UT35","download_json":"https://pith.science/pith/AJN4JMUHRGRELNX56CULS7UT35.json","view_paper":"https://pith.science/paper/AJN4JMUH","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2507.05445&json=true","fetch_graph":"https://pith.science/api/pith-number/AJN4JMUHRGRELNX56CULS7UT35/graph.json","fetch_events":"https://pith.science/api/pith-number/AJN4JMUHRGRELNX56CULS7UT35/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/AJN4JMUHRGRELNX56CULS7UT35/action/timestamp_anchor","attest_storage":"https://pith.science/pith/AJN4JMUHRGRELNX56CULS7UT35/action/storage_attestation","attest_author":"https://pith.science/pith/AJN4JMUHRGRELNX56CULS7UT35/action/author_attestation","sign_citation":"https://pith.science/pith/AJN4JMUHRGRELNX56CULS7UT35/action/citation_signature","submit_replication":"https://pith.science/pith/AJN4JMUHRGRELNX56CULS7UT35/action/replication_record"}},"created_at":"2026-07-05T11:33:30.567602+00:00","updated_at":"2026-07-05T11:33:30.567602+00:00"}