The Synthetic Web: Adversarially-Curated Mini-Internets for Diagnosing Epistemic Weaknesses of Language Agents
Not on the map. Why?
Abstract (arXiv)
Language agents increasingly act as web-enabled systems that search, browse, and synthesize information from diverse sources. However, these sources can include unreliable or adversarial content, and the robustness of agents to adversarial ranking - where misleading information appears prominently in search results - remains poorly understood. Existing benchmarks evaluate functional navigation or static factuality but cannot causally isolate this vulnerability, and current mitigation strategies for retrieval-augmented generation remain largely untested under such conditions. We introduce Synthetic Web Benchmark, a procedurally generated environment comprising thousands of hyperlinked articles with ground-truth labels for credibility and factuality, process-level interaction traces, and contamination filtering to eliminate training-data leakage. By injecting a single high-plausibility misinformation article into a controllable search rank, we measure the causal effect of adversarial exposure in six frontier models. The results reveal catastrophic failures: accuracy collapses despite unlimited access to truthful sources, with minimal search escalation and severe miscalibration. These findings expose fundamental limitations in how current frontier models handle conflicting information, with immediate implications for deployment in high-stakes domains. Our benchmark enables systematic analysis of these failure modes and provides a controlled testbed for evaluating mitigation strategies under adversarial ranking - a gap in current research. This work establishes a reproducible baseline for developing search-robust and epistemically humble agents capable of resisting manipulation in high-stakes domains.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Builds on 38 of its 40 references that are in the map. First posted on arXiv 28 Feb 2026.
Builds on
38 of 40 references.
References · 38
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2020Retrieval-Augmented Generation for Knowledge-Intensive NLP Taskscited by 9,160
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
- 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,072
- 2023Lost in the Middle: How Language Models Use Long Contextscited by 3,383
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2023WebArena: A Realistic Web Environment for Building Autonomous Agentscited by 1,908
- 2023Self-RAG: Learning to Retrieve, Generate, and Critique through Self-Reflectioncited by 1,800
- 2021WebGPT: Browser-assisted question-answering with human feedbackcited by 1,722
- 2018FEVER: a large-scale dataset for Fact Extraction and VERificationcited by 1,362
- 2023Mind2Web: Towards a Generalist Agent for the Webcited by 1,210
- 2020ALFWorld: Aligning Text and Embodied Environments for Interactive Learningcited by 1,143
26 more
- 2023SelfCheckGPT: Zero-Resource Black-Box Hallucination Detection for Generative Large Language Modelscited by 787
- 2017Adversarial Examples for Evaluating Reading Comprehension Systemscited by 568
- 2023Active Retrieval Augmented Generationcited by 506
- 2019Leveraging Procedural Generation to Benchmark Reinforcement Learningcited by 478
- 2022Large Language Models Struggle to Learn Long-Tail Knowledgecited by 452
- 2023Cognitive Architectures for Language Agentscited by 422
- 2018TextWorld: A Learning Environment for Text-based Gamescited by 304
- 2024MultiHop-RAG: Benchmarking Retrieval-Augmented Generation for Multi-Hop Queriescited by 253
- 2025Why Language Models Hallucinatecited by 205
- 2023RA-DIT: Retrieval-Augmented Dual Instruction Tuningcited by 194
- 2024Corrective Retrieval Augmented Generationcited by 187
- 2024WebLINX: Real-World Website Navigation with Multi-Turn Dialoguecited by 177
- 2025An Illusion of Progress? Assessing the Current State of Web Agentscited by 165
- 2024The BrowserGym Ecosystem for Web Agent Researchcited by 152
- 2024Long-form factuality in large language modelscited by 146
- 2024Dissecting Adversarial Robustness of Multimodal LM Agentscited by 118
- 2024Automatic and Universal Prompt Injection Attacks against Large Language Modelscited by 112
- 2024Found in the Middle: Calibrating Positional Attention Bias Improves Long Context Utilizationcited by 97
- 2024Sycophancy in Large Language Models: Causes and Mitigationscited by 97
- 2025SafeArena: Evaluating the Safety of Autonomous Web Agentscited by 97
- 2024The Dawn After the Dark: An Empirical Study on Factuality Hallucination in Large Language Modelscited by 87
- 2025Worse than Zero-shot? A Fact-Checking Dataset for Evaluating the Robustness of RAG Against Misleading Retrievalscited by 27
- 2024Corpus Poisoning via Approximate Greedy Gradient Descentcited by 21
- 2025How to Protect Yourself from 5G Radiation? Investigating LLM Responses to Implicit Misinformationcited by 17
- 2025SecureWebArena: A Holistic Security Evaluation Benchmark for LVLM-based Web Agentscited by 17
- 2025When Hallucination Costs Millions: Benchmarking AI Agents in High-Stakes Adversarial Financial Marketscited by 5
Built on by
Citing papers per year: 2026: 3.
3 papers.
- 2026Don't Blindly Trust It: How Unreliable Feedback Breaks Tool-Using LLM Agentscited by 3
- 2026MetaResearcher: Scaling Deep Research via Self-Reflective Reinforcement Learning in Adversarial Virtual Environmentscited by 1
- 2026Training-Free Inference-Time Self-Reflection and Cost-Bounded Early Stopping for Large Language Modelscited by 0
- 2026Training-Free Inference-Time Self-Reflection and Cost-Bounded Early Stopping for Large Language Models19 Aug 2026
- 2026Don't Blindly Trust It: How Unreliable Feedback Breaks Tool-Using LLM Agents19 Jun 2026
- 2026MetaResearcher: Scaling Deep Research via Self-Reflective Reinforcement Learning in Adversarial Virtual Environments18 Jun 2026
Similar, not cited
Close in wording, no citation either way
- 2026DRNOISE: Benchmarking Deep Research Agents in Misleading Evidence Environments
- 2025Toward a Safer Web: Multilingual Multi-Agent LLMs for Mitigating Adversarial Misinformation Attacks
- 2024Language agents achieve superhuman synthesis of scientific knowledge
- 2026Retrieval Collapses When AI Pollutes the Web
- 2025REAL: Benchmarking Autonomous Agents on Deterministic Simulations of Real Websites
- 2025Mind2Web 2: Evaluating Agentic Search with Agent-as-a-Judge
- 2025From Web Search towards Agentic Deep Research: Incentivizing Search with Reasoning Agents
- 2024Evaluating Robustness of Generative Search Engine on Adversarial Factual Questions