{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:MO6LRTIMQMEO7C3BAFCT63R3DN","short_pith_number":"pith:MO6LRTIM","canonical_record":{"source":{"id":"2608.04741","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-05T12:08:16Z","cross_cats_sorted":[],"title_canon_sha256":"bf5a510c5c6bb690e742f9eea67ff5f50c56b4a53ab5c0aa74fca5c86110772a","abstract_canon_sha256":"9cc6ccba289f1686827628a78be81f7d17814deb58de1a3628ca23bd6e10f7b9"},"schema_version":"1.0"},"canonical_sha256":"63bcb8cd0c8308ef8b6101453f6e3b1b5d84550e8468edd35ec0f4dddf77a448","source":{"kind":"arxiv","id":"2608.04741","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.04741","created_at":"2026-08-06T01:47:00Z"},{"alias_kind":"arxiv_version","alias_value":"2608.04741v1","created_at":"2026-08-06T01:47:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.04741","created_at":"2026-08-06T01:47:00Z"},{"alias_kind":"pith_short_12","alias_value":"MO6LRTIMQMEO","created_at":"2026-08-06T01:47:00Z"},{"alias_kind":"pith_short_16","alias_value":"MO6LRTIMQMEO7C3B","created_at":"2026-08-06T01:47:00Z"},{"alias_kind":"pith_short_8","alias_value":"MO6LRTIM","created_at":"2026-08-06T01:47:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:MO6LRTIMQMEO7C3BAFCT63R3DN","target":"record","payload":{"canonical_record":{"source":{"id":"2608.04741","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-05T12:08:16Z","cross_cats_sorted":[],"title_canon_sha256":"bf5a510c5c6bb690e742f9eea67ff5f50c56b4a53ab5c0aa74fca5c86110772a","abstract_canon_sha256":"9cc6ccba289f1686827628a78be81f7d17814deb58de1a3628ca23bd6e10f7b9"},"schema_version":"1.0"},"canonical_sha256":"63bcb8cd0c8308ef8b6101453f6e3b1b5d84550e8468edd35ec0f4dddf77a448","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-06T01:47:00.864755Z","signature_b64":"ncdDoMmktOwhk5OyUmtZDpmFs6RyG0nTqQ3rQLsdq/oz4UGrqufzlKLVj8iLovEG7CmUOloR1QjvAqAySZkSBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"63bcb8cd0c8308ef8b6101453f6e3b1b5d84550e8468edd35ec0f4dddf77a448","last_reissued_at":"2026-08-06T01:47:00.863264Z","signature_status":"signed_v1","first_computed_at":"2026-08-06T01:47:00.863264Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2608.04741","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-06T01:47:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yIXds8gC+2Kmj13kR/kg2cEoUdM20q4ul5LFIbPTneJqNqrQSnGJps6pGnftZWh2MXh6pk42jsvshjeb4GoSBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T10:15:52.205009Z"},"content_sha256":"7c79b7f3cd8161e06d5d07de7a94804bebfa601d42bf76958b7fc8bc19ffe922","schema_version":"1.0","event_id":"sha256:7c79b7f3cd8161e06d5d07de7a94804bebfa601d42bf76958b7fc8bc19ffe922"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:MO6LRTIMQMEO7C3BAFCT63R3DN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"LoginTrap: Uncovering Task-Agnostic Phishing-Style Indirect Prompt Injection Attacks against LLM-based Web Agents","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Kaifeng Huang, Longtao Guo, Yang Shi, Zelin Zhang","submitted_at":"2026-08-05T12:08:16Z","abstract_excerpt":"LLM-based web agents automate user tasks by observing webpages and executing browser actions on behalf of users. As these agents operate on real web services, login becomes a sensitive authentication boundary because it involves credentials and sensitive information. Existing work shows that malicious webpage content can manipulate web agent actions, but it has not fully examined whether such content can induce login and cause end-to-end private data leakage. We study this attack surface and present LoginTrap, a task-agnostic login-inducing attack against LLM-based web agents. LoginTrap assume"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.04741","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.04741/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-08-06T01:47:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bEsk/7jCDKZE+OhNFD7r/bZSYw12mhwQyGv3RCtENlsD/Egj4lAjk2X/jC0IqIZZLyP1yU8wBO0LNe4eHZ5mAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T10:15:52.205387Z"},"content_sha256":"3896247a663a7458b652ca1bd76222d5f7c85f6d27a7f5115765dfb9d1e8d663","schema_version":"1.0","event_id":"sha256:3896247a663a7458b652ca1bd76222d5f7c85f6d27a7f5115765dfb9d1e8d663"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MO6LRTIMQMEO7C3BAFCT63R3DN/bundle.json","state_url":"https://pith.science/pith/MO6LRTIMQMEO7C3BAFCT63R3DN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MO6LRTIMQMEO7C3BAFCT63R3DN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T10:15:52Z","links":{"resolver":"https://pith.science/pith/MO6LRTIMQMEO7C3BAFCT63R3DN","bundle":"https://pith.science/pith/MO6LRTIMQMEO7C3BAFCT63R3DN/bundle.json","state":"https://pith.science/pith/MO6LRTIMQMEO7C3BAFCT63R3DN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MO6LRTIMQMEO7C3BAFCT63R3DN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:MO6LRTIMQMEO7C3BAFCT63R3DN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9cc6ccba289f1686827628a78be81f7d17814deb58de1a3628ca23bd6e10f7b9","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-05T12:08:16Z","title_canon_sha256":"bf5a510c5c6bb690e742f9eea67ff5f50c56b4a53ab5c0aa74fca5c86110772a"},"schema_version":"1.0","source":{"id":"2608.04741","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2608.04741","created_at":"2026-08-06T01:47:00Z"},{"alias_kind":"arxiv_version","alias_value":"2608.04741v1","created_at":"2026-08-06T01:47:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.04741","created_at":"2026-08-06T01:47:00Z"},{"alias_kind":"pith_short_12","alias_value":"MO6LRTIMQMEO","created_at":"2026-08-06T01:47:00Z"},{"alias_kind":"pith_short_16","alias_value":"MO6LRTIMQMEO7C3B","created_at":"2026-08-06T01:47:00Z"},{"alias_kind":"pith_short_8","alias_value":"MO6LRTIM","created_at":"2026-08-06T01:47:00Z"}],"graph_snapshots":[{"event_id":"sha256:3896247a663a7458b652ca1bd76222d5f7c85f6d27a7f5115765dfb9d1e8d663","target":"graph","created_at":"2026-08-06T01:47:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2608.04741/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"LLM-based web agents automate user tasks by observing webpages and executing browser actions on behalf of users. As these agents operate on real web services, login becomes a sensitive authentication boundary because it involves credentials and sensitive information. Existing work shows that malicious webpage content can manipulate web agent actions, but it has not fully examined whether such content can induce login and cause end-to-end private data leakage. We study this attack surface and present LoginTrap, a task-agnostic login-inducing attack against LLM-based web agents. LoginTrap assume","authors_text":"Kaifeng Huang, Longtao Guo, Yang Shi, Zelin Zhang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-05T12:08:16Z","title":"LoginTrap: Uncovering Task-Agnostic Phishing-Style Indirect Prompt Injection Attacks against LLM-based Web Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.04741","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7c79b7f3cd8161e06d5d07de7a94804bebfa601d42bf76958b7fc8bc19ffe922","target":"record","created_at":"2026-08-06T01:47:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9cc6ccba289f1686827628a78be81f7d17814deb58de1a3628ca23bd6e10f7b9","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-08-05T12:08:16Z","title_canon_sha256":"bf5a510c5c6bb690e742f9eea67ff5f50c56b4a53ab5c0aa74fca5c86110772a"},"schema_version":"1.0","source":{"id":"2608.04741","kind":"arxiv","version":1}},"canonical_sha256":"63bcb8cd0c8308ef8b6101453f6e3b1b5d84550e8468edd35ec0f4dddf77a448","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"63bcb8cd0c8308ef8b6101453f6e3b1b5d84550e8468edd35ec0f4dddf77a448","first_computed_at":"2026-08-06T01:47:00.863264Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-08-06T01:47:00.863264Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ncdDoMmktOwhk5OyUmtZDpmFs6RyG0nTqQ3rQLsdq/oz4UGrqufzlKLVj8iLovEG7CmUOloR1QjvAqAySZkSBQ==","signature_status":"signed_v1","signed_at":"2026-08-06T01:47:00.864755Z","signed_message":"canonical_sha256_bytes"},"source_id":"2608.04741","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7c79b7f3cd8161e06d5d07de7a94804bebfa601d42bf76958b7fc8bc19ffe922","sha256:3896247a663a7458b652ca1bd76222d5f7c85f6d27a7f5115765dfb9d1e8d663"],"state_sha256":"cd65b8aae6ae7f9d05212b901415a872e76451f6e745dfd87091eb11bf4c2ecf"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Q2RYnOXW7/tChAspOBlliu92ggqI8L8AUpugCYNtyP1/5nw9yaCkJNS4LYSYl8u6kQIr8r47Ez2ML8BpjrRECw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T10:15:52.207667Z","bundle_sha256":"aa9631b86c13f8575c49ef521c17e6c9740f8d1e6707e72c47a819f99924e989"}}