@misc{indiciae18fa3ba338b5,
  title = {Poison Once, Exploit Forever: Environment-Injected Memory Poisoning Attacks on Web Agents},
  author = {Wei Zou and Mingwen Dong and Miguel Romero Calvo and Shuaichen Chang and Jiang Guo and Dongkyu Lee and Xing Niu and Xiaofei Ma and Yanjun Qi and Jiarong Jiang},
  year = {2026},
  url = {https://arxiv.org/abs/2604.02623},
  note = {Source identifier: 2604.02623}
}