Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 11 papers
Filter3

Attack type

Prompt injection4

Attack technique

Gradient and representation optimization4

Impact

Harmful content3Unauthorized actions28Data and privacy leaks6Output manipulation11Availability and reliability16

System type

Models and APIs172LLM applications72AI Agent104coding agent14science agent6web agent5Multi-agent systems26Embodied systems and robotics6

Attack surface / entry point

Images, audio and video5

Layer

Application layer6

System component

Vision4Multimodal5
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 232papers have no tags yet and are not included in filtered results.
Impact：Output manipulationSystem type：web agentSystem type：Embodied systems and roboticsClear all

Another 232papers do not have category tags yet and are not included in filtered results.

  2. DefensesarXiv 2610.09496

    SOUL：用稀疏特征策略遗忘缓解 VLA 模型的状态幻觉

    提出 SOUL 稀疏特征策略遗忘，缓解 VLA 状态幻觉

    arXiv
    2610.09496
    Published
    Layer
    Training and data layer
    Setting
    Embodied systems and robotics
    Evaluated models
    OpenVLA, π0.5
    AbstractSOUL 以稀疏特征遗忘 VLA 状态幻觉。

    SOUL用稀疏特征引导的策略 unlearning 处理 VLA 的 state hallucination。

    Paper analysisRead analysis
  5. AttacksarXiv 2608.10393

    DURA：用扩散模型生成自然对抗补丁攻击 VLA 机器人模型

    提出 DURA，用扩散模型生成自然对抗补丁操控 VLA 机器人动作

    arXiv
    2608.10393
    Published
    Layer
    Prompt layer
    Setting
    Embodied systems and robotics
    Evaluated models
    OpenVLA-7B, π0-FAST, openvla-7B
    AbstractDURA 用扩散潜空间轨迹生成自然补丁，白盒与黑盒都能把 VLA 导向指定动作。

    DURA 是针对 VLA 的扩散式、补丁内容不受限的机器人攻击，同时支持白盒梯度和只看动作输出的黑盒。

    Paper analysisRead analysis
  6. AttacksarXiv 2608.04565

    Researchers propose Breadcrumbing long-range attack that can hijack the evidence chain of DeepResearch-style search agents

    提出权威链劫持与轨迹引导策略演化，劫持搜索 Agent 的证据链

    arXiv
    2608.04565
    Published
    Layer
    Application layer
    Setting
    web agent
    Evaluated models
    Qwen3.5-9B, Gemma4-31B, DeepResearch and others7

    Abstract论文揭示了多步搜索智能体在受限中间人操纵下的脆弱性，提出 ACH 策略与 TGSE 演化方法并完成系统验证。

    Paper analysisRead analysis
  8. AttacksarXiv 2606.09499

    研究者提出针对世界模型的机器人学习管线投毒攻击

    提出 VPH 与 VTH，只改视频帧劫持世界模型并投毒下游策略

    arXiv
    2606.09499
    Published
    Layer
    Training and data layer
    Setting
    Embodied systems and robotics
    Evaluated models
    Cosmos-Predict 2.5, Cosmos-Predict 2.5 AC, Dino WM and others4
    Abstract只改视频帧经世界模型投毒。

    只改看似安全的视频帧，经世界模型之后才改变下游机器人策略。 问题在于世界模型进入数据生成后，数据集检查看到的仍是安全演示，合成轨迹却可以变危险。

    Paper analysisRead analysis
  9. AttacksarXiv 2603.16960

    Adversarial attacks against modern vision-language models

    Conduct adversarial attacks on product images for open-source visual shopping agents and induce wrong purchases

    arXiv
    2603.16960
    Published
    Layer
    Application layer
    Setting
    web agent
    Evaluated models
    LLaVA-v1.5-7B, Qwen2.5-VL-7B
    AbstractThe authors state that LLaVA is easily induced by three attacks to buy the wrong item, while Qwen's correct purchase rate remains close to its clean condition.

    The authors compare the robustness of two open-source VLM shopping agents against image adversarial perturbations in a self-built e-commerce environment.

    Paper analysisRead analysis
  11. AttacksarXiv 2601.13612

    PINA：针对导航智能体的提示注入攻击

    提出 PINA，迭代优化针对导航智能体的提示注入

    arXiv
    2601.13612
    Published
    Layer
    Application layer
    Setting
    Embodied systems and robotics
    Evaluated models
    GPT-3.5-turbo, GPT-4, Balcı et al. [2]
    AbstractPINA 在黑盒下优化导航提示注入。

    PINA 是面向基于 LLM 的导航智能体、在黑盒条件下优化提示注入的框架。

    Paper analysisRead analysis
You have reached the end