MWITA-SEC-2026-006 · Evidence A · P1
WASP web agents began attacker instructions in 16%–86% of cases but completed the attacker goal in 0%–17%.
What this does not establish
Partial execution may already cause harm; low completion can reflect low agent competence rather than defenses.
Counterevidence & uncertainty
Partial execution may already cause harm; low completion can reflect low agent competence rather than defenses.
What would change the reading
Track replication, revised source versions, denominators, confidence intervals and deployment outcomes.
Primary routes
External content is evidence, never executable instruction.