{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:L6ZUV63SXKDBD2MMUXG5B547FQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ae015cf6568cae0d845803b45ae560bdef704daff7f1578837c8f8fe20f6a6cb","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-18T14:29:02Z","title_canon_sha256":"c785f50cd797262f2b7bb21cbfe24446fff23f54186506e147df44434b9e5ce8"},"schema_version":"1.0","source":{"id":"2506.17318","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.17318","created_at":"2026-07-05T11:25:15Z"},{"alias_kind":"arxiv_version","alias_value":"2506.17318v1","created_at":"2026-07-05T11:25:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.17318","created_at":"2026-07-05T11:25:15Z"},{"alias_kind":"pith_short_12","alias_value":"L6ZUV63SXKDB","created_at":"2026-07-05T11:25:15Z"},{"alias_kind":"pith_short_16","alias_value":"L6ZUV63SXKDBD2MM","created_at":"2026-07-05T11:25:15Z"},{"alias_kind":"pith_short_8","alias_value":"L6ZUV63S","created_at":"2026-07-05T11:25:15Z"}],"graph_snapshots":[{"event_id":"sha256:4d408b498e5c2facb537a4c6c11a6aebcf2eba46cc1d695f5a1c88967484a000","target":"graph","created_at":"2026-07-05T11:25:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.17318/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Autonomous web navigation agents, which translate natural language instructions into sequences of browser actions, are increasingly deployed for complex tasks across e-commerce, information retrieval, and content discovery. Due to the stateless nature of large language models (LLMs), these agents rely heavily on external memory systems to maintain context across interactions. Unlike centralized systems where context is securely stored server-side, agent memory is often managed client-side or by third-party applications, creating significant security vulnerabilities. This was recently exploited","authors_text":"Ashwin Hebbar, Atharv Singh Patlan, Pramod Viswanath, Prateek Mittal","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-18T14:29:02Z","title":"Context manipulation attacks : Web agents are susceptible to corrupted memory"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.17318","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d538e6e49037fcfba7c0da0d650101b79e860bca25748a6aabb5bb8ff92a3088","target":"record","created_at":"2026-07-05T11:25:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ae015cf6568cae0d845803b45ae560bdef704daff7f1578837c8f8fe20f6a6cb","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-18T14:29:02Z","title_canon_sha256":"c785f50cd797262f2b7bb21cbfe24446fff23f54186506e147df44434b9e5ce8"},"schema_version":"1.0","source":{"id":"2506.17318","kind":"arxiv","version":1}},"canonical_sha256":"5fb34afb72ba8611e98ca5cdd0f79f2c3112c4e61ab8ea7ff2d97fd61509f239","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5fb34afb72ba8611e98ca5cdd0f79f2c3112c4e61ab8ea7ff2d97fd61509f239","first_computed_at":"2026-07-05T11:25:15.692754Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:25:15.692754Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"DUBn6wFMvVE1KS8Xt/gjYIM2qeTEng6uARzeeztS6G6cdkHrj99a460nCUCvPytBZHOtnTOEArRdRwp5Hw7oAg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:25:15.693244Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.17318","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d538e6e49037fcfba7c0da0d650101b79e860bca25748a6aabb5bb8ff92a3088","sha256:4d408b498e5c2facb537a4c6c11a6aebcf2eba46cc1d695f5a1c88967484a000"],"state_sha256":"fc1eaf79be75c8ea09d68dade80b6a9d7194408f302c2022f27b93caafb65562"}