Open-Source Android AI Agents Could Let Invisible Screen Text Run Code on Host PCs

An Android app can exploit permissions to draw over windows and write to shared storage, enabling invisible text to send instructions to AI agents on a phone. Researchers demonstrated this method and six other attacks against five open-source mobile agent frameworks, including AppAgent and AppAgentX.