{"id":"https://openalex.org/W7204832475","doi":"https://doi.org/10.18653/2026.emnlp-main.258","title":"Fully Unleashing the Multimodal Attacker: Meta-Adaptive Jailbreaking of Vision-Language Models","display_name":"Fully Unleashing the Multimodal Attacker: Meta-Adaptive Jailbreaking of Vision-Language Models","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7204832475","doi":"https://doi.org/10.18653/2026.emnlp-main.258"},"language":"en","primary_location":{"id":"doi:10.18653/2026.emnlp-main.258","doi":"https://doi.org/10.18653/2026.emnlp-main.258","is_oa":true,"landing_page_url":"https://doi.org/10.18653/2026.emnlp-main.258","pdf_url":"https://aclanthology.org/2026.emnlp-main.258.pdf","source":{"id":"https://openalex.org/S4363608991","display_name":"Conference on Empirical Methods in Natural Language Processing (EMNLP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 Conference on Empirical Methods in Natural Language Processing","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://aclanthology.org/2026.emnlp-main.258.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5148784416","display_name":"Shen Pang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I75059550","display_name":"Zhejiang Gongshang University","ror":"https://ror.org/0569mkk41","country_code":"CN","type":"education","lineage":["https://openalex.org/I75059550"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shen Pang","raw_affiliation_strings":["Laboratory for Statistical Monitoring and Intelligent Governance of Common Prosperity , School of Statistics and Data Science , Zhejiang Gongshang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Laboratory for Statistical Monitoring and Intelligent Governance of Common Prosperity , School of Statistics and Data Science , Zhejiang Gongshang University","institution_ids":["https://openalex.org/I75059550"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030151061","display_name":"Benlei Cui","orcid":"https://orcid.org/0000-0002-2186-2676","observed_orcids":["https://orcid.org/0000-0002-2186-2676"]},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Benlei Cui","raw_affiliation_strings":["Yuvion Team , Alibaba Group"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Yuvion Team , Alibaba Group","institution_ids":["https://openalex.org/I45928872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5148774862","display_name":"Yuke Wang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I75059550","display_name":"Zhejiang Gongshang University","ror":"https://ror.org/0569mkk41","country_code":"CN","type":"education","lineage":["https://openalex.org/I75059550"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuke Wang","raw_affiliation_strings":["Laboratory for Statistical Monitoring and Intelligent Governance of Common Prosperity , School of Statistics and Data Science , Zhejiang Gongshang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Laboratory for Statistical Monitoring and Intelligent Governance of Common Prosperity , School of Statistics and Data Science , Zhejiang Gongshang University","institution_ids":["https://openalex.org/I75059550"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049745106","display_name":"Xuemei Dong","orcid":"https://orcid.org/0009-0002-2329-1704","observed_orcids":["https://orcid.org/0009-0002-2329-1704","https://orcid.org/0009-0002-4260-8068"]},"institutions":[{"id":"https://openalex.org/I75059550","display_name":"Zhejiang Gongshang University","ror":"https://ror.org/0569mkk41","country_code":"CN","type":"education","lineage":["https://openalex.org/I75059550"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xuemei Dong","raw_affiliation_strings":["Laboratory for Statistical Monitoring and Intelligent Governance of Common Prosperity , School of Statistics and Data Science , Zhejiang Gongshang University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Laboratory for Statistical Monitoring and Intelligent Governance of Common Prosperity , School of Statistics and Data Science , Zhejiang Gongshang University","institution_ids":["https://openalex.org/I75059550"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121129965","display_name":"Yuwen Zhai","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuwen Zhai","raw_affiliation_strings":["Taobao & Tmall Group of Alibaba"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Taobao & Tmall Group of Alibaba","institution_ids":["https://openalex.org/I45928872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5148818861","display_name":"Jingqun Tang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4405270328","display_name":"Ant Group (China)","ror":"https://ror.org/00g5w7n47","country_code":"CN","type":"company","lineage":["https://openalex.org/I4405270328"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingqun Tang","raw_affiliation_strings":["Ant Group"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ant Group","institution_ids":["https://openalex.org/I4405270328"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5141211016","display_name":"Haiyang Yu","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haiyang Yu","raw_affiliation_strings":["Fudan University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fudan University","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125774891","display_name":"Hui Xue","orcid":"https://orcid.org/0000-0002-2093-2839","observed_orcids":["https://orcid.org/0000-0002-2093-2839"]},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hui Xue","raw_affiliation_strings":["Yuvion Team , Alibaba Group"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Yuvion Team , Alibaba Group","institution_ids":["https://openalex.org/I45928872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125740908","display_name":"Longtao Huang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Longtao Huang","raw_affiliation_strings":["Yuvion Team , Alibaba Group"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Yuvion Team , Alibaba Group","institution_ids":["https://openalex.org/I45928872"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5123721505","display_name":"Haiwen Hong","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haiwen Hong","raw_affiliation_strings":["Yuvion Team , Alibaba Group"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Yuvion Team , Alibaba Group","institution_ids":["https://openalex.org/I45928872"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.7172,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.93365278,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"5848","last_page":"5874"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vision-language-models","display_name":"vision-language models","score":0.9279999732971191},{"id":"https://openalex.org/keywords/attack-success-rate","display_name":"attack success rate","score":0.6669999957084656},{"id":"https://openalex.org/keywords/model-transferability","display_name":"model transferability","score":0.6759999990463257},{"id":"https://openalex.org/keywords/large-language-model-security","display_name":"large language model security","score":0.47099998593330383}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7185999751091003},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.7107999920845032},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6420999765396118},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.492900013923645},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4580000042915344},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3707999885082245},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.36340001225471497},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.31709998846054077},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.2978000044822693},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.27950000762939453},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.26910001039505005},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.262800008058548}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.18653/2026.emnlp-main.258","doi":"https://doi.org/10.18653/2026.emnlp-main.258","is_oa":true,"landing_page_url":"https://doi.org/10.18653/2026.emnlp-main.258","pdf_url":"https://aclanthology.org/2026.emnlp-main.258.pdf","source":{"id":"https://openalex.org/S4363608991","display_name":"Conference on Empirical Methods in Natural Language Processing (EMNLP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 Conference on Empirical Methods in Natural Language Processing","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2608.27531","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.27531","pdf_url":"https://arxiv.org/pdf/2608.27531","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2608.27531","doi":"https://doi.org/10.48550/arxiv.2608.27531","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2608.27531","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.18653/2026.emnlp-main.258","doi":"https://doi.org/10.18653/2026.emnlp-main.258","is_oa":true,"landing_page_url":"https://doi.org/10.18653/2026.emnlp-main.258","pdf_url":"https://aclanthology.org/2026.emnlp-main.258.pdf","source":{"id":"https://openalex.org/S4363608991","display_name":"Conference on Empirical Methods in Natural Language Processing (EMNLP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2026 Conference on Empirical Methods in Natural Language Processing","raw_type":"proceedings-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G2361508083","display_name":"\u57fa\u4e8e\u53d8\u91cf\u805a\u7c7b\u5b50\u7a7a\u95f4\u7684\u9ad8\u7ef4\u6570\u636e\u65b9\u5dee\u5206\u6790\u65b9\u6cd5","funder_award_id":"LQK26A010002","funder_id":"https://openalex.org/F4320338464","funder_display_name":"Natural Science Foundation of Zhejiang Province"}],"funders":[{"id":"https://openalex.org/F4320312301","display_name":"Zhejiang Gongshang University","ror":"https://ror.org/0569mkk41"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320338464","display_name":"Natural Science Foundation of Zhejiang Province","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204832475.pdf","grobid_xml":"https://content.openalex.org/works/W7204832475.grobid-xml"},"referenced_works_count":18,"referenced_works":["https://openalex.org/W2736601468","https://openalex.org/W3001279689","https://openalex.org/W4385374425","https://openalex.org/W4386554921","https://openalex.org/W4391631327","https://openalex.org/W4403878024","https://openalex.org/W4404330874","https://openalex.org/W4409348010","https://openalex.org/W4414281281","https://openalex.org/W4416780398","https://openalex.org/W7108210333","https://openalex.org/W7128238232","https://openalex.org/W7133191652","https://openalex.org/W7160106859","https://openalex.org/W7160920760","https://openalex.org/W7167100696","https://openalex.org/W7203484546","https://openalex.org/W7203633735"],"related_works":["https://openalex.org/W4415967096","https://openalex.org/W7160106859","https://openalex.org/W4403791397","https://openalex.org/W4415963328","https://openalex.org/W4385387622","https://openalex.org/W4417539267","https://openalex.org/W4411799673","https://openalex.org/W4412886811","https://openalex.org/W7119482942","https://openalex.org/W7129642073"],"abstract_inverted_index":{"The":[0],"safety":[1],"of":[2,75,145],"large":[3],"vision-language":[4],"models":[5],"is":[6],"increasingly":[7],"stress-tested":[8],"by":[9,113],"multimodal":[10,76],"jailbreaks,":[11],"yet":[12],"existing":[13],"attacks":[14,23,30],"remain":[15],"largely":[16],"static":[17],"at":[18],"the":[19,25,33,52,109],"meta":[20],"level:":[21],"template-based":[22],"freeze":[24],"image-text":[26,34],"layout,":[27],"while":[28],"iterative":[29],"adapt":[31],"only":[32],"content":[35],"with":[36],"fixed":[37],"attack":[38,59,65,72,77],"strategies":[39],"and":[40,67,98,104,134,151],"frozen":[41],"attacker":[42,53,68,120],"parameters.We":[43],"propose":[44],"Meta-Adaptive":[45],"Multimodal":[46],"Jailbreaking":[47],"(MAMJ),":[48],"which":[49,86],"instead":[50],"optimizes":[51],"itself":[54],"along":[55],"two":[56],"axes:":[57],"an":[58,79],"strategy":[60],"prompt":[61],"(ASP)":[62],"\u03b8":[63],"governing":[64],"iteration":[66],"weights":[69],"\u03d5":[70,124],"determining":[71],"effectiveness.Across":[73],"groups":[74],"trajectories,":[78],"LLMbased":[80],"critique":[81],"first":[82],"refines":[83],"\u03b8,":[84],"after":[85],"groupaggregated":[87],"attack-success-rate":[88],"(ASR)":[89],"rewards":[90],"update":[91],"\u03d5.On":[92],"MM-SafetyBench,":[93],"MAMJ":[94],"achieves":[95],"82.02%,":[96],"79.29%,":[97],"83.04%":[99],"ASR":[100],"against":[101,154],"GPT-4o,":[102],"Gemini-3-Pro-Preview,":[103],"Seed":[105],"2.0,":[106],"respectively,":[107],"outperforming":[108],"strongest":[110],"sample-level":[111],"baseline":[112],"up":[114],"to":[115,131,148],"24.1":[116],"percentage":[117],"points.The":[118],"learned":[119],"(\u03b8":[121],"\u22c6":[122,125],",":[123],")":[126],"also":[127],"transfers":[128],"without":[129],"retraining":[130],"unseen":[132],"victims":[133],"remains":[135],"effective":[136],"under":[137],"representative":[138],"defenses.These":[139],"results":[140],"reveal":[141],"a":[142],"systemic":[143],"vulnerability":[144],"frontier":[146],"VLMs":[147],"meta-adaptive":[149],"jailbreaks":[150],"motivate":[152],"defenses":[153],"meta-level":[155],"adversaries.":[156]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-11-08T12:12:28.789561","created_date":"2026-09-01T00:00:00"}