@article{poisononceexploitforeverenvironmentinjec,
  title = {Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents},
  author = {Wei Zou and Mingwen Dong and Miguel Romero Calvo and Shuaichen Chang and Jiang Guo and Dongkyu Lee and Xing Niu and Xiaofei Ma and Yanjun Qi and Jiarong Jiang},
  year = {2026},
  eprint = {2604.02623},
  archivePrefix = {arXiv},
  url = {https://arxiv.org/abs/2604.02623},
}