Agent Data Injection: Fooling AI Agents With the Data They Already Trust

Risk Summary You ask a web agent to summarize the reviews on a product page. A fake review planted by an attacker makes it click "Buy Now" instead, and an order goes through. No malware, no phishing,