Search papers, labs, and topics across Lattice.
The paper introduces AgentHijack, a benchmark for evaluating the robustness of multimodal large language model (MLLM)-based computer-use agents against common environmental corruptions like pop-ups and resolution changes. Experiments reveal that even minor corruptions significantly degrade agent performance on desktop tasks, highlighting their fragility. To address this, they propose AgentHijack-Agent, a framework with enhanced grounding and environment checking, demonstrating its effectiveness in mitigating the impact of these corruptions.
Even minor real-world environment corruptions can cripple MLLM-powered computer-use agents, revealing a surprising fragility in their ability to execute desktop tasks.
Autonomous computer use agents that powered by multimodal large language models (MLLMs) are emerging as capable assistants for completing complex digital workflows. However, real-world execution environments are far from ideal: pop-ups, resolution changes, and competing applications frequently interfere with agent perception and control. We introduce AgentHijack, a benchmark designed to evaluate the robustness of computer-use agents under common corruptions, where the uncertainties in dynamic environment disrupt the execution flow without direct adversarial intent. Specifically, AgentHijack introduces 9 configurable common corruptions to replicate realistic imperfect scenarios. We evaluate a variety of desktop tasks that utilize MLLM-based agents and discover that even minor instances of corruption can result in substantial performance degradation, which emphasizes the fragility of agents and underscores the necessity of robustness evaluation. Afterward, we propose AgentHijack-Agent, a framework that integrates an action generator with enhanced grounding capabilities and an onlooker responsible for behavior summarization and environment checking. Extensive experiments validate its effectiveness. Our code, environment, baseline models and data are publicly available at: https://AgentHijack.github.io.
