Researchers demonstrate seven attacks on open-source Android AI agents

Attacks exploit lack of input sanitization in five frameworks: AppAgent, AppAgentX, Mobile-Agent-v3, Open-AutoGLM, and MobA. A helper app can inject commands via invisible screen text, achieving host PC code execution. No CVE assigned; maintainers notified but no response as of July 17.