Several critical vulnerabilities in real-world agents that allow an attacker to launch various attacks: arbitrary click attacks on web agents (Claude in Chrome, Antigravity, and Nanobrowser), and remote cade execution and supply-chain attacks on coding agents (Claude Code, Codex, and Gemini CLI).