WASP: Benchmarking Web Agent Security Against Prompt Injection
Date: 2025-04
Affected: OpenAI Operator, Anthropic Computer-Use, Browser-Use, web agents
Attack vector: prompt-injection
Category: research
Severity: High

Evtimov et al. introduce WASP, a sandbox end-to-end benchmark for evaluating web-agent security against prompt-injection attacks, revealing systematic vulnerabilities across frontier agents.


Mitigations:

Architectural layers (MAESTRO):