ObliInjection: Order-Oblivious Prompt Injection Attack to LLM Agents with Multi-source Data. - Reachal Wang; Yuqi Jia; Neil Zhenqiang Gong (NDSS, 2026)