{"data":{"id":"20ccdeb8-c79a-4538-b2e5-304c7d6500ae","title":"Harness Matters: Measuring and Dissecting Security Resilience in Web Agents","summary":"This paper measures how the execution harness of web agents affects their security, not just the backend model. The authors model harnesses as four stages (goal interpretation, webpage perception, reasoning and planning, action execution) and build WebTrap Farm, an evaluation framework covering malicious user prompts, malicious prompt injection, and deceptive web design. They find existing harnesses remain vulnerable to typical attacks, with some unsafe behaviors occurring without explicit attack content, and that both harness and backend model significantly affect outcomes.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2611.11971v1","publishedAt":"2026-11-09T06:53:04.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["prompt_injection","jailbreak"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-09T06:53:04.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","safety"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":["AML.T0051","AML.T0054"]}}