Commercial LLM Agents Are Already Vulnerable to Simple Yet Dangerous Attacks

https://arxiv.org/pdf/2502.08586