arXiv · 2606.17783
Is It Real? Exploiting Virtual-Physical Discrimination Vulnerability in Mixed Reality
Abstract
Consumer mixed reality (MR) headsets seamlessly blend virtual content into physical environments with sufficient fidelity that users may be unable to distinguish virtual objects from physical ones. We identify this virtual-physical discrimination vulnerability as an exploitable security primitive. Through speculative design workshops with 12 experts from cybersecurity and MR/HCI, we develop a taxonomy of virtual-physical confusion attacks and implement four proof-of-concept attacks on Apple Vision Pro, evaluating them with 26 participants in realistic MR tasks. All four attacks altered user behavior, with success rates ranging from 85% to 100%, producing misdirected interactions, misjudged object identities, biased purchasing decisions, and altered navigation paths. Notably, the most successful attacks were also the hardest to detect according to participants' subjective ratings. Even participants who recognized virtual content still complied behaviorally, and no participant attributed anomalous events to adversarial causes. We propose platform-level provenance, interaction gating, and user education as countermeasures.
Explore related subjects
Keep this discovery
Xueyang Wang, Xihuan Yao, Yanming Xiu, Xin Yi, Maria Gorlatova, Hewu Li. 2026-06-16. Is It Real? Exploiting Virtual-Physical Discrimination Vulnerability in Mixed Reality. https://arxiv.org/abs/2606.17783
Cite the original work for its findings. Save a collection to share your selection of sources.