@inproceedings{xu-etal-2026-attacker,
    title = "After the Attacker Leaves: Benchmarking Carryover Attacks on {LLM} Agents",
    author = "Xu, Zhiyue  and
      Wang, Xukai  and
      Huang, Zhiyuan  and
      Zhan, Mingjie  and
      Zhao, Jian  and
      Zhang, Xu-Yao",
    editor = "Lee, Hung-Yi  and
      Dev, Sunipa  and
      Li, Jessy  and
      Elliott, Desmond",
    booktitle = "Proceedings of the 2026 Conference on Empirical Methods in Natural Language Processing",
    month = oct,
    year = "2026",
    address = "Budapest, Hungary",
    publisher = "Association for Computational Linguistics",
    url = "https://aclanthology.org/2026.emnlp-main.1996/",
    pages = "45456--45476",
    ISBN = "979-8-89176-459-0"
}