@misc{dziemian-2026-how,
  author = {Mateusz Dziemian and Maxwell Lin and Xiaohan Fu and Micha Nowak and Nick Winter and Eliot Jones and Andy Zou and Lama Ahmad and Kamalika Chaudhuri and Sahana Chennabasappa and Xander Davies and Lauren Deason and Benjamin L. Edelman and Tanner Emek and Ivan Evtimov and Jim Gust and Maia Hamin and Kat He and Klaudia Krawiecka and Riccardo Patana and Neil Perry and Troy Peterson and Xiangyu Qi and Javier Rando and Zifan Wang and Zihan Wang and Spencer Whitman and Eric Winsor and Arman Zharmagambetov and Matt Fredrikson and Zico Kolter},
  title = {How Vulnerable Are AI Agents to Indirect Prompt Injections? Insights from a Large-Scale Public Competition},
  year = {2026},
  month = {3},
  eprint = {2603.15714},
  archiveprefix = {arXiv}
}