When Agents See Differently: Exposing UI Desynchronization Threats in Mobile Agents

arXiv:2609.16732 · cs.CR · Submitted 2026-09-15 · Read on arXiv

cs.CR

Submitted: 2026-09-15

Updated: 2026-09-15

Comments: 18 pages, 9 figures

Code: https://github.com/anomalyco/opencode

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

• Ablation — 7× in this paper · explained in 1 episode
• Grounding — 5× in this paper · explained in 3 episodes
• Verification — 5× in this paper · explained in 2 episodes
• Adaptation — 3× in this paper · explained in 1 episode
• Benchmark — 3× in this paper · explained in 2 episodes
• Core — 3× in this paper · explained in 2 episodes
• Robustness — 3× in this paper · explained in 5 episodes
• Ablation study — 2× in this paper · explained in 1 episode
• Fine-Tuning — 2× in this paper · explained in 5 episodes
• Online Adaptation — 2× in this paper · explained in 3 episodes
• Ablation Studies — 1× in this paper · explained in 1 episode
• Abstraction — 1× in this paper · explained in 1 episode
• Accuracy — 1× in this paper · explained in 1 episode
• Action Space — 1× in this paper · explained in 1 episode
• Actionability — 1× in this paper · explained in 3 episodes
• Alignment — 1× in this paper · explained in 1 episode
• Benchmarking — 1× in this paper · explained in 3 episodes
• Computational overhead — 1× in this paper · explained in 2 episodes
• Consistency — 1× in this paper · explained in 3 episodes
• Generalizability — 1× in this paper · explained in 6 episodes
• Generalization — 1× in this paper · explained in 13 episodes
• Knowledge Graph — 1× in this paper · explained in 7 episodes
• Large Language Models (LLMs) — 1× in this paper · explained in 6 episodes
• Pruning — 1× in this paper · explained in 4 episodes
• Reasoning Traces — 1× in this paper · explained in 3 episodes
• Redundancy — 1× in this paper · explained in 2 episodes
• Steering — 1× in this paper · explained in 2 episodes
• Trace — 1× in this paper · explained in 2 episodes
• Transferability — 1× in this paper · explained in 4 episodes
• Verifier — 1× in this paper · explained in 2 episodes
• Vision-Language Model (VLM) — 1× in this paper · explained in 3 episodes
• Visual Grounding — 1× in this paper · explained in 2 episodes

Sources

• GhostEI-Bench: Do Mobile Agents Resilience to Environmental Injection in Dynamic On-Device Environments?
• Advancing Mobile GUI Agents: A Verifier-Driven Approach to Practical Deployment
• Invisible to Humans, Triggered by Agents: Stealthy Jailbreak Attacks on Mobile Vision-Language Agents
• Measuring the Security of Mobile LLM Agents under Adversarial Prompts from Untrusted Third-Party Channels
• MIRAGE: Context-Aware Prompt Injection against Mobile GUI Agents via User-Generated Content
• AgentLens: Adaptive Visual Modalities for Human-Agent Interaction in Mobile GUI Agents
• SafeMobile: Chain-level Jailbreak Detection and Automated Evaluation for Multimodal Mobile Agents
• AgentRAE: Remote Action Execution through Notification-based Visual Backdoors against Screenshots-based Mobile GUI Agents
• Improved GUI Grounding via Iterative Narrowing
• Mind the Gap: Action Rebinding Attacks against Android GUI Agents
• UI-TARS: Pioneering Automated GUI Interaction with Native Agents
• DroidBot-GPT: GPT-powered UI Automation for Android
• From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents
• Autonomous Large Language Model Agents Enabling Intent-Driven Mobile GUI Testing
• GraphPilot: GUI Task Automation with One-Step LLM Reasoning Powered by Knowledge Graph

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs