{"id":"https://openalex.org/W7214197642","doi":"https://doi.org/10.48550/arxiv.2609.27155","title":"The Like Trap: Multi-Stage Poisoning against Agents in Similarity-based Recommendation Systems","display_name":"The Like Trap: Multi-Stage Poisoning against Agents in Similarity-based Recommendation Systems","publication_year":2026,"publication_date":"2026-09-22","ids":{"openalex":"https://openalex.org/W7214197642","doi":"https://doi.org/10.48550/arxiv.2609.27155"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2609.27155","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2609.27155","pdf_url":"https://arxiv.org/pdf/2609.27155","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2609.27155","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5152596179","display_name":"Yue Xing","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I87216513","display_name":"Michigan State University","ror":"https://ror.org/05hs6h993","country_code":"US","type":"education","lineage":["https://openalex.org/I87216513"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xing, Yue","raw_affiliation_strings":["Michigan State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Michigan State University","institution_ids":["https://openalex.org/I87216513"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5152594690","display_name":"Pengfei He","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I87216513","display_name":"Michigan State University","ror":"https://ror.org/05hs6h993","country_code":"US","type":"education","lineage":["https://openalex.org/I87216513"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"He, Pengfei","raw_affiliation_strings":["Michigan State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Michigan State University","institution_ids":["https://openalex.org/I87216513"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5152750773","display_name":"Zitao Li","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I87216513","display_name":"Michigan State University","ror":"https://ror.org/05hs6h993","country_code":"US","type":"education","lineage":["https://openalex.org/I87216513"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Li, Zitao","raw_affiliation_strings":["Michigan State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Michigan State University","institution_ids":["https://openalex.org/I87216513"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I87216513"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7310000061988831,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7310000061988831,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10203","display_name":"Recommender Systems and Techniques","score":0.15330000221729279,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.0738999992609024,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/llm-based-agents","display_name":"LLM agents","score":0.8550000190734863},{"id":"https://openalex.org/keywords/social-media-recommendation","display_name":"social media recommendation","score":0.7179999947547913},{"id":"https://openalex.org/keywords/oasis","display_name":"OASIS","score":0.7129999995231628}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6642000079154968},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6428999900817871},{"id":"https://openalex.org/C557471498","wikidata":"https://www.wikidata.org/wiki/Q554950","display_name":"Recommender system","level":2,"score":0.6256999969482422},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.593999981880188},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.593999981880188},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5626000165939331},{"id":"https://openalex.org/C518677369","wikidata":"https://www.wikidata.org/wiki/Q202833","display_name":"Social media","level":2,"score":0.47350001335144043},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4334000051021576},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.413100004196167},{"id":"https://openalex.org/C89611455","wikidata":"https://www.wikidata.org/wiki/Q6804646","display_name":"Mechanism (biology)","level":2,"score":0.37299999594688416},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3296000063419342},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.3228999972343445},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.31769999861717224},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.30630001425743103},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.29840001463890076},{"id":"https://openalex.org/C41550386","wikidata":"https://www.wikidata.org/wiki/Q529909","display_name":"Multi-agent system","level":2,"score":0.28130000829696655},{"id":"https://openalex.org/C2779137570","wikidata":"https://www.wikidata.org/wiki/Q16243196","display_name":"EXPOSE","level":2,"score":0.257999986410141}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2609.27155","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2609.27155","pdf_url":"https://arxiv.org/pdf/2609.27155","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2609.27155","doi":"https://doi.org/10.48550/arxiv.2609.27155","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2609.27155","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2609.27155","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2609.27155","pdf_url":"https://arxiv.org/pdf/2609.27155","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7214197642.pdf","grobid_xml":"https://content.openalex.org/works/W7214197642.grobid-xml"},"referenced_works_count":12,"referenced_works":["https://openalex.org/W4404571155","https://openalex.org/W4407310643","https://openalex.org/W4416095455","https://openalex.org/W6891874193","https://openalex.org/W7135231294","https://openalex.org/W7137959969","https://openalex.org/W7138840503","https://openalex.org/W7138946092","https://openalex.org/W7140138845","https://openalex.org/W7140325293","https://openalex.org/W7164513884","https://openalex.org/W7166869271"],"related_works":["https://openalex.org/W3010088852","https://openalex.org/W7166644237","https://openalex.org/W4417536055","https://openalex.org/W7129095565","https://openalex.org/W4401863692","https://openalex.org/W7160435223","https://openalex.org/W7134109382","https://openalex.org/W7131678682","https://openalex.org/W7119069015","https://openalex.org/W7167328284"],"abstract_inverted_index":{"With":[0],"recent":[1],"advancements":[2],"in":[3,103,118],"large":[4],"language":[5],"models":[6],"(LLMs)":[7],"and":[8,17,72,79,123,160],"LLM-based":[9],"agents,":[10],"these":[11,143],"agents":[12,34],"are":[13],"becoming":[14],"increasingly":[15],"autonomous":[16],"gaining":[18],"broader":[19],"access":[20],"to":[21,63,100,181],"act":[22],"on":[23,26,36,51,142],"users'":[24],"behalf":[25],"the":[27,30,57,64,82,92,101,114,126,138,162,165,171,175,178,192],"internet.":[28],"However,":[29],"vulnerability":[31],"of":[32,84,133,164],"automated":[33],"deployed":[35],"social":[37,85],"media":[38,86],"platforms":[39],"(e.g.,":[40],"for":[41],"managing":[42],"a":[43,104,130],"user's":[44],"personal":[45],"account)":[46],"remains":[47],"underexplored.":[48],"Existing":[49],"studies":[50],"agent":[52,102],"poisoning":[53],"typically":[54],"assume":[55],"that":[56,113,150],"adversary":[58],"can":[59,120,136],"expose":[60],"poisoned":[61,134,153,183],"content":[62,99],"agent.":[65],"Although":[66],"such":[67,98],"an":[68,148],"attack":[69,176],"is":[70,75],"direct":[71],"effective,":[73],"it":[74],"more":[76,105],"easily":[77],"detected":[78],"mitigated.":[80],"In":[81],"context":[83],"platforms,":[87],"this":[88],"leaves":[89],"open":[90],"whether":[91],"recommendation":[93,179],"system":[94,180],"itself":[95],"would":[96],"surface":[97],"subtle":[106],"manner.":[107],"Through":[108],"theoretical":[109,158],"analysis,":[110],"we":[111,124,145],"show":[112],"like-score":[115,172],"mechanism":[116],"used":[117],"OASIS":[119],"be":[121],"exploited,":[122],"characterize":[125],"conditions":[127],"under":[128],"which":[129],"multi-stage":[131],"chain":[132],"posts":[135,184],"steer":[137],"agent's":[139],"feed.":[140],"Based":[141],"insights,":[144],"further":[146],"develop":[147],"algorithm":[149],"crafts":[151],"realistic":[152],"posts.":[154],"Experiments":[155],"support":[156],"our":[157],"findings":[159],"demonstrate":[161],"effectiveness":[163],"proposed":[166],"algorithm.":[167],"Notably,":[168],"by":[169],"exploiting":[170],"feedback":[173],"loop,":[174],"causes":[177],"select":[182],"even":[185],"when":[186],"their":[187],"user-post":[188],"similarity":[189],"falls":[190],"below":[191],"retrieval":[193],"threshold.":[194]},"counts_by_year":[],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2026-09-25T00:00:00"}