Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 15 papers
Filter3

Attack type

Jailbreaks14

Attack technique

Gradient and representation optimization4Automated search15Multi-turn escalation6Encoding and obfuscation18Cross-modal payloads28

Impact

Harmful content14

System type

Models and APIs15

Attacker access

Black-box12

Attack surface / entry point

User input15Images, audio and video13

Layer

Prompt layer15

System component

MCP and skills5Guardrails and judges12Vision6Image generation6Multimodal15
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 265papers have no tags yet and are not included in filtered results.
Attack technique：Automated searchAttack surface / entry point：User inputSystem component：MultimodalClear all

Another 265papers do not have category tags yet and are not included in filtered results.

  4. AttacksarXiv 2609.01168

    CRACK：用多智能体辩论越狱多层安全过滤的 T2I 模型

    提出 CRACK，用多智能体辩论在黑盒下越狱文生图多层安全过滤

    arXiv
    2609.01168
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    Stable Diffusion v1.4, SDXL, DALL·E 3 and others4
    AbstractCRACK 以分层诊断的多智能体辩论搜索多层 T2I 过滤器的联合规避区域。

    CRACK 是面向文本生成图像模型多层安全栈的黑盒越狱框架，用几何上的 Detection Surface 解释为何粗粒度反馈不够。

    Paper analysisRead analysis
  7. AttacksarXiv 2607.02961

    研究者提出信息过载方法越狱大型视觉语言模型

    提出 INFER+ 信息过载方法，越狱大型视觉语言模型

    arXiv
    2607.02961
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Attacker
    Black-box, Gray-box
    Evaluated models
    Qwen3-VL-8B, Qwen2-VL-7B, InternVL3.5-8B and others8
    Abstract用图文过载越狱 LVLM。

    这篇工作用信息过载越狱 LVLM，而不是靠 OOD 变换隐藏意图。

    Paper analysisRead analysis
  8. AttacksarXiv 2603.09246

    研究者提出 Reasoning-Oriented Programming，通过链式语义片段越狱大型视觉语言模型

    提出 VROP，把有害意图拆成良性视觉 gadget 越狱视觉语言模型

    arXiv
    2603.09246
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    GPT-4o, Claude 3.7 Sonnet, GLM-4V-Plus and others7
    AbstractVROP 以良性视觉 gadget 与控制流提示词做组合越狱。

    VROP是 black-box 多模态越狱框架：不在输入中放显式恶意触发，而把有害目标拆成语义正交的良性视觉 gadget，再用控制流提示词把合成留到后期推理。

    Paper analysisRead analysis
  10. AttacksarXiv 2603.20198

    研究者提出 MM-Plan 多模态越狱框架

    提出 MM-Plan 多模态越狱框架，自动规划多轮图像编辑以越狱视觉独占目标

    arXiv
    2603.20198
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    Llama-3.2-11B, InternVL3-8B, Qwen3-VL-8B and others8
    Abstract作者称全局规划能攻破对单轮攻击更稳的前沿 MLLM。

    MM-Plan 是面向 Visual Exclusivity 的 black-box 多模态红队方法，并配有人工基准 VE-Safety。

    Paper analysisRead analysis
  13. AttacksarXiv 2511.10692

    StyleBreak：利用风格化音频越狱揭示大型音频语言模型的对齐漏洞

    提出 StyleBreak 风格化音频越狱，利用语音属性绕过音频语言模型对齐

    arXiv
    2511.10692
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Attacker
    Black-box
    Evaluated models
    Qwen2-Audio-7B-Instruct, MERaLiON-AudioLLM-Whisper-SEA-LION, Ultravox-v0.4.1-Llama-3.1-8B and others6
    Paper analysisRead analysis
  15. AttacksarXiv 2503.01839

    研究者用微调大语言模型越狱带安全护栏的文生图模型

    提出 PromptTune，微调 LLM 改写提示以越狱文生图护栏

    arXiv
    2503.01839
    Published
    Layer
    Prompt layer
    Setting
    Models and APIs
    Attacker
    No-box (offline transfer)
    Evaluated models
    SDXL-Turbo, MACE, SafeGen
    AbstractLLM 改写可提高过滤器绕过率。

    PromptTune 用微调 LLM 改写提示词，攻击带安全过滤器或对齐的文生图模型。

    Paper analysisRead analysis
You have reached the end