Why Are Web AI Agents More Vulnerable Than Standalone LLMs?
Date: 2025-02
Affected: Web AI agents based on GPT-4, Claude, Llama
Attack vector: prompt-injection
Category: research
Severity: High

Systematic study showing web AI agents are markedly more vulnerable than the underlying LLM, even when both refuse the same direct request, due to environment exposure, action policies, and looser guardrails.


Mitigations:

Architectural layers (MAESTRO):