Translation in progress Some entries still include text in the original language.
Oct 13 · Tuesday
Another 215 papers do not have category tags yet and are not included in filtered results.
“
About this collection Collection in progress We are building a large AI safety paper collection to help researchers find work related to their interests. Papers are collected automatically andfiltered only for relevance to AI safety , without judging quality, novelty or reading value. The default “Annotated first” shows papers with tags or published paper analyses first. Each group is ordered by original publication date, newest first, with undated papers last. “Newest first” uses publication dates only. This order is not a quality ranking.
One-line summaries, tags and paper analyses are prepared by AI from the papers. Language models may have systematic biases and produce hallucinations.We plan to carry out human annotation and review to reduce errors in this content.
提出 CollageAttack，用空间文本碎片重组越狱文生图模型
Published Sep 29
Evaluated models GPT-Image-2 , Doubao-Seedream-5.0-Lite , Wan2.7-Image-Pro and others5 Abstract 系统揭示 T2I 跨模态空间合成安全漏洞，证实离散无害元素可在图像层面重构有害意图并放大传播强度。
提出 DIVA，将有害意图拆成视觉锚点与运动文本以越狱视频生成模型
Published Sep 7
Evaluated models Wan , CogVideoX , LTX-Video and others9 Abstract DIVA 用视觉锚点抑制语义漂移做视频越狱，并给出多条件安全基准 TI2VSafetyBench。DIVA 是针对带参考图的视频生成模型的免训练 black-box 越狱：用一致性机制本身堵住语义漂移这条安全逃逸路径。 。
提出 DSR 跨模态越狱，用无害图文诱导 MLLM 生成有害图像
Published Jun 1
Evaluated models gemini-2.5-flash-image , qwen-image-2.0 , Tongyi Wanx 2.5 Abstract DSR 用无害图文诱导商业 MLLM 输出有害图像，作者称组合能力会反过来扩大攻击面。DSR 是一种 black-box 跨模态越狱：输入侧不放显式有害内容，而让商业 MLLM 在推理中把无害图文重组成有害图像。
Propose TFM, using start and end frames and implicit substitution to jailbreak text-to-video models
Published Mar 7
Evaluated models Pixverse V5 , Hailuo 02 , Kling 2.1 Master and others4 Abstract TFM first extracts start and end frames and then performs implicit substitution.TFM is a strictly black-box prompt jailbreak for text-to-video that exploits the model's temporal infilling of unspecified intermediate processes.
提出 BVS 图文越狱，用中和拼接图和诱导提示词让模型生成有害图像
Published Jan 22
Evaluated models GPT-5 (12 January 2026 release) , Gemini 1.5 Flash (15 January 2026 release) Abstract BVS 以重建后再生成诱导有害图像。BVS 用图文对诱导 MLLM 生成有害图像。作者认为，相对文本越狱和单模态图像诱导，视觉生成的安全审查仍不充分。
提出 MacPrompt 跨语言字符重组越狱，绕过文生图模型的过滤与概念移除
Published Jan 12
Evaluated models SD v2.1 , ESD , SLD (Max) and others14 提出 PC² 越狱，用身份保持描述与远端多语翻译绕过文生图过滤
Published Jan 9
Evaluated models GPT-4o , GPT-5 , GPT-5.1 and others7 You have reached the end