ResearchBenchmarksIndirect Prompt Injection Attack on CFH-Hard Computer UseIndirect Prompt Injection Attack on CFH-Hard Computer UseFollow69Attack Success Rate (IA)Undefended-2.7615.8734.553.13Oct 20, 2025Evaluation resultsMethodMethodLinksAttack Success Rate (IA)Attack Success Rate (Gr.)Attack Success Rate (AD)Undefended2025.106910088ACF2025.106910088LP2025.106910088LFBacking LLM=LlamaBacking LLM=Llama2025.100063LFBacking LLM=GPT-4oBacking LLM=GPT-4o2025.10000LFBacking LLM=GPT-4o-miniBacking LLM=GPT-4o-mini2025.100044LFBacking LLM=o4-miniBacking LLM=o4-mini2025.100050CV (ours)2025.10000