Skip to content
Oct 13 · Tuesday

All papers

Found 1 paper
Filter4

Attack technique

Defense-targeted1

System type

Models and APIs7AI Agent19coding agent6Embodied systems and robotics1

Layer

Model layer0Application layer1
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 201papers have no tags yet and are not included in filtered results.
Attack technique：Defense-targetedSystem type：Embodied systems and roboticsLayer：Model layerLayer：Application layerClear all

Another 201papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2603.01414

    Jailbreaking embodied LLMs via action-level manipulation

    Propose Blindfold, jailbreaking embodied LLMs with action-level manipulation

    arXiv
    2603.01414
    Published
    Layer
    Application layer
    Setting
    Embodied systems and robotics
    Attacker
    No-box (offline transfer)
    Evaluated models
    Llama-3.1-8B, DeepSeek-R1-14B, Gemma-3-27B and others8
    AbstractBlindfold jailbreaks embodied LLMs with action-level proxy planning, and the authors claim it can bypass semantic checks and is effective in both simulation and real-world settings.

    Blindfold is a no-box attack against embodied LLM planning modules, rewriting malicious intent into seemingly benign action sequences.

    Paper analysisRead analysis
You have reached the end