paperMay 2026Unreviewed

WAAA! Web Adversaries Against Agentic Browsers

Sohom Datta, Alex Nahapetyan, William Enck, Alexandros Kapravelos

Abstract

Large language models (LLMs) are increasingly being integrated into web browsers to create agentic browsing systems that execute actions on behalf of the user. Prior work considering the security of agentic browsers focuses exclusively on indirect prompt-injection attacks. However, by failing to consider traditional web attacks, previous agentic browser threat models have a blind spot to web social engineering attacks originally designed to trick humans. In this paper, we propose the first web-f

Cite

@misc{datta2026waaa,
  title = {{WAAA! Web Adversaries Against Agentic Browsers}},
  author = {Sohom Datta and Alex Nahapetyan and William Enck and Alexandros Kapravelos},
  year = {2026},
  month = may,
  eprint = {2605.05509},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2605.05509}
}