In-Browser LLM-Guided Fuzzing for Real-Time Prompt Injection Testing in Agentic AI Browsers

Avihay Cohen

🏛 Institutions: BrowserTotal
📅 Date: October 15, 2025
📑 Publisher: arXiv
💻 Env: Web
🔑 Keywords: prompt injection in-browser fuzzing feedback-guided fuzzing progressive evasion page summarization question answering

TLDR

This paper studies prompt-injection testing for agentic AI browsers with an LLM-guided fuzzing loop that runs inside a real browser and mutates malicious pages using immediate attack feedback. It reports that simple attacks are usually blocked, but adaptive mutations drive failure rates to 58-74% by the tenth iteration, with page summarization and question-answering features showing the highest risk.

Open paper arXiv Edit on GitHub Report issue