Caution for the Environment: Multimodal LLM Agents are Susceptible to Environmental Distractions
Xinbei Ma , Yiting Wang , Yao Yao , Tongxin Yuan , Aston Zhang , Zhuosheng Zhang , Hai Zhao
- 🏛 Institutions
- SJTU , Meta
- 📅 Date
- August 5, 2024
- 📑 Publisher
- ACL 2025
- 💻 Env
- 🔑 Keywords
TLDR
This paper highlights the vulnerability of multimodal agents to environmental distractions. The researchers demonstrate that these agents, which process multiple types of input (e.g., text, images, audio), can be significantly impacted by irrelevant or misleading environmental cues. The study provides insights into the limitations of current multimodal systems and emphasizes the need for more robust architectures that can filter out distractions and maintain focus on relevant information in complex, real-world environments.
Related papers (11)
- MobileJailBench: Red Queen Jailbreak Benchmarking for Mobile AgentsOctober 16, 2026 · arXiv
- MMA-SafetyBench: A Benchmark for Multimodal Agent Safety EvaluationOctober 14, 2026 · arXiv
- Control OSWorld: An AI Control Environment for GUI Computer Use AgentsOctober 2, 2026 · arXiv
- Learning Reliable GUI Agents under Imperfect PriorsSeptember 30, 2026 · arXiv
- SCOUT: Synergizing Reasoning and Tool-Use for Computer-Use SafetySeptember 28, 2026 · arXiv
- Before Acting, Change the State: Prospective State Intervention for Web Agents under Deceptive InterfacesSeptember 28, 2026 · arXiv
- REBASE: Device-Cloud Experience Coherence for GUI Agents Across App UpdatesSeptember 26, 2026 · arXiv
- Constructing Challenging Browser-Use Tasks by Controlled Environment InterventionsSeptember 20, 2026 · arXiv
- A Dual-Process Perspective on Nudge Susceptibility in LLM-Based GUI AgentsSeptember 17, 2026 · arXiv
- AgentHijack: Visual Patch Attacks on Multimodal Computer-Use AgentsSeptember 6, 2026 · arXiv
- WiP: Characterizing and Defending Against Mobile-Agent-Driven MFA AutomationSeptember 2, 2026 · arXiv