{"id":"https://openalex.org/W7203911532","doi":"https://doi.org/10.48550/arxiv.2608.19737","title":"TempJail: Temporal Jailbreak Attack against Large Vision-Language Models via Subtitle Scheduling","display_name":"TempJail: Temporal Jailbreak Attack against Large Vision-Language Models via Subtitle Scheduling","publication_year":2026,"publication_date":"2026-08-20","ids":{"openalex":"https://openalex.org/W7203911532","doi":"https://doi.org/10.48550/arxiv.2608.19737"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2608.19737","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.19737","pdf_url":"https://arxiv.org/pdf/2608.19737","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2608.19737","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5147662705","display_name":"Ling Zhou","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhou, Ling","raw_affiliation_strings":[". University of Electronic Science and Technology of China , Chengdu , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":". University of Electronic Science and Technology of China , Chengdu , China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5146034043","display_name":"YiHao Huang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Huang, Yihao","raw_affiliation_strings":[". East China Normal University , Shanghai , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":". East China Normal University , Shanghai , China","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5147714196","display_name":"Jingling Sun","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Sun, Jingling","raw_affiliation_strings":[". University of Electronic Science and Technology of China , Chengdu , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":". University of Electronic Science and Technology of China , Chengdu , China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5147703050","display_name":"Zhiwen Tian","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tian, Zhiwen","raw_affiliation_strings":[". University of Electronic Science and Technology of China , Chengdu , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":". University of Electronic Science and Technology of China , Chengdu , China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5147798320","display_name":"Yi Zeng","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zeng, Yi","raw_affiliation_strings":[". University of Electronic Science and Technology of China , Chengdu , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":". University of Electronic Science and Technology of China , Chengdu , China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073705151","display_name":"Qihe Liu","orcid":"https://orcid.org/0000-0002-8195-1304","observed_orcids":["https://orcid.org/0000-0002-8195-1304"]},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liu, Qihe","raw_affiliation_strings":[". University of Electronic Science and Technology of China , Chengdu , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":". University of Electronic Science and Technology of China , Chengdu , China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5143706886","display_name":"Shijie Zhou","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhou, Shijie","raw_affiliation_strings":[". University of Electronic Science and Technology of China , Chengdu , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":". University of Electronic Science and Technology of China , Chengdu , China","institution_ids":["https://openalex.org/I150229711"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/large-vision-language-models","display_name":"large vision-language models","score":0.9850000143051147},{"id":"https://openalex.org/keywords/black-box-attacks","display_name":"black-box attacks","score":0.8040000200271606},{"id":"https://openalex.org/keywords/video-understanding","display_name":"video understanding","score":0.3869999945163727},{"id":"https://openalex.org/keywords/video-reasoning","display_name":"video reasoning","score":0.4950000047683716},{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.3619999885559082}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7882000207901001},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7645000219345093},{"id":"https://openalex.org/C2780364048","wikidata":"https://www.wikidata.org/wiki/Q204028","display_name":"Subtitle","level":2,"score":0.659500002861023},{"id":"https://openalex.org/C206729178","wikidata":"https://www.wikidata.org/wiki/Q2271896","display_name":"Scheduling (production processes)","level":2,"score":0.6079999804496765},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.48829999566078186},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.45570001006126404},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3946000039577484},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3659000098705292},{"id":"https://openalex.org/C112758219","wikidata":"https://www.wikidata.org/wiki/Q16038819","display_name":"Duration (music)","level":2,"score":0.3073999881744385},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2985999882221222},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.2766000032424927},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.27250000834465027},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.27070000767707825},{"id":"https://openalex.org/C2776544517","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Unexpected events","level":2,"score":0.26010000705718994},{"id":"https://openalex.org/C2778598663","wikidata":"https://www.wikidata.org/wiki/Q1407599","display_name":"Video content analysis","level":4,"score":0.25279998779296875},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.25200000405311584}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2608.19737","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.19737","pdf_url":"https://arxiv.org/pdf/2608.19737","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2608.19737","doi":"https://doi.org/10.48550/arxiv.2608.19737","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2608.19737","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2608.19737","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.19737","pdf_url":"https://arxiv.org/pdf/2608.19737","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7203911532.pdf","grobid_xml":"https://content.openalex.org/works/W7203911532.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7204594257","https://openalex.org/W7134829796","https://openalex.org/W7215039939","https://openalex.org/W7138243560","https://openalex.org/W4411799673","https://openalex.org/W4415316409","https://openalex.org/W6929485330","https://openalex.org/W7138077102","https://openalex.org/W7203848790","https://openalex.org/W7169860908"],"abstract_inverted_index":{"Large":[0],"vision-language":[1],"models":[2],"(LVLMs)":[3],"have":[4],"achieved":[5],"remarkable":[6],"progress":[7],"in":[8,37,84,134,181],"video":[9,21,29],"understanding":[10],"and":[11,18,71,87,125,136,154,177,186],"reasoning.":[12],"Despite":[13],"extensive":[14],"studies":[15],"on":[16,57,65,108,150,184],"text-":[17],"image-based":[19],"jailbreaks,":[20],"jailbreaks":[22],"against":[23],"LVLMs":[24,135,153],"remain":[25],"largely":[26],"unexplored.":[27],"Existing":[28],"jailbreak":[30,52,117],"methods":[31],"mainly":[32],"manipulate":[33],"textual":[34,61],"content":[35,90],"embedded":[36],"videos,":[38],"while":[39],"overlooking":[40],"how":[41],"such":[42],"information":[43,62],"is":[44],"organized":[45],"over":[46],"time.":[47],"Our":[48],"analysis":[49],"reveals":[50],"that":[51,119,139,158],"effectiveness":[53],"depends":[54],"not":[55],"only":[56],"the":[58,141,145,161,172],"semantics":[59],"of":[60,144],"but":[63],"also":[64],"its":[66],"temporal":[67,96,128,132],"presentation,":[68],"including":[69],"duration":[70],"timing-slot":[72],"allocation.":[73],"Motivated":[74],"by":[75,175],"this":[76,109],"finding,":[77],"we":[78,111],"use":[79],"subtitles,":[80],"which":[81],"are":[82],"common":[83],"real-world":[85],"videos":[86],"allow":[88],"semantic":[89],"to":[91,130],"be":[92],"presented":[93],"under":[94],"precise":[95],"control":[97],"without":[98],"appearing":[99],"visually":[100],"intrusive,":[101],"as":[102],"a":[103,114],"natural":[104],"attack":[105,163],"medium.":[106],"Based":[107],"insight,":[110],"propose":[112],"TempJail,":[113],"black-box":[115],"video-based":[116],"framework":[118],"constructs":[120],"query-aligned":[121],"dialogue-style":[122],"subtitle":[123],"sequences":[124],"optimizes":[126],"their":[127],"scheduling":[129],"exploit":[131],"vulnerabilities":[133],"elicit":[137],"responses":[138],"satisfy":[140],"harmful":[142],"intent":[143],"source":[146],"query.":[147],"Extensive":[148],"experiments":[149],"four":[151],"representative":[152],"two":[155],"datasets":[156],"demonstrate":[157],"TempJail":[159],"achieves":[160],"highest":[162],"success":[164],"rate":[165],"across":[166],"all":[167],"evaluated":[168],"model--dataset":[169],"settings,":[170],"outperforming":[171],"strongest":[173],"baseline":[174],"53":[176],"18":[178],"percentage":[179],"points":[180],"dataset-averaged":[182],"ASR":[183],"GPT-5":[185],"Gemini":[187],"3.5-Flash,":[188],"respectively.":[189]},"counts_by_year":[],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2026-08-22T00:00:00"}