@article{envinjectionenvironmentalpromptinjection,
  title = {EnvInjection: Environmental Prompt Injection Attack to Multi-modal Web Agents},
  author = {Xilong Wang and John Bloch and Zedian Shao and Yuepeng Hu and Shuyan Zhou and Neil Zhenqiang Gong},
  year = {2025},
  eprint = {2505.11717},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2505.11717v1},
}