TY - RPRT TI - Environmental Injection Attacks against GUI Agents in Realistic Dynamic Environments AU - Yitong Zhang AU - Ximo Li AU - Liyi Cai AU - Jia Li PY - 2026 UR - https://arxiv.org/abs/2509.11250 ID - 2509.11250 ER -