AI 安全
MissClick Exploits Coordinate Token Place Values to Attack GUI Agents, Achieving Targeted Misclick Rates of Up to 62.67%
Rather than treating GUI coordinates as ordinary text, MissClick exploits small changes to hundreds-place tokens to cause large shifts in click positions. The study significantly increased attack success rates against OS-Atlas and UGround, showing that the security of computer-use agents cannot be evaluated solely by element-localization accuracy.