What changed
MissClick exploits digit-token coordinates so a small token change causes a large click displacement. Targeted success reached 44.86% on OS-Atlas and 62.67% on UGround.
Why it matters
A minor model-output change can become a consequential interface action after coordinate tokens are parsed into numerical positions.
What to do
Verify proposed clicks remain inside the detected target element and require semantic confirmation for send, buy, delete, and permission controls.
Caveat
This is a white-box attack on selected grounding models and benchmarks. Real applications and black-box systems may differ, and no implementation was linked.