{"id":"https://openalex.org/W7133293391","doi":"https://doi.org/10.48550/arxiv.2603.01414","title":"Jailbreaking Embodied LLMs via Action-level Manipulation","display_name":"Jailbreaking Embodied LLMs via Action-level Manipulation","publication_year":2026,"publication_date":"2026-03-02","ids":{"openalex":"https://openalex.org/W7133293391","doi":"https://doi.org/10.48550/arxiv.2603.01414"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.01414","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.01414","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.01414","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5127933141","display_name":"Xinyu Huang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Huang, Xinyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127884388","display_name":"Qiang Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Qiang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049975132","display_name":"Leming Shen","orcid":"https://orcid.org/0000-0001-7661-6432"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shen, Leming","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127960515","display_name":"Zijing Ma","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ma, Zijing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5091556511","display_name":"Yuanqing Zheng","orcid":"https://orcid.org/0000-0003-3096-687X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zheng, Yuanqing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8133000135421753,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8133000135421753,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.02710000053048134,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.020899999886751175,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/embodied-cognition","display_name":"Embodied cognition","score":0.9473000168800354},{"id":"https://openalex.org/keywords/action","display_name":"Action (physics)","score":0.6168000102043152},{"id":"https://openalex.org/keywords/embodied-agent","display_name":"Embodied agent","score":0.5593000054359436},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.5220000147819519},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.4593000113964081},{"id":"https://openalex.org/keywords/cognitive-robotics","display_name":"Cognitive robotics","score":0.45010000467300415},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.3467999994754791}],"concepts":[{"id":"https://openalex.org/C100609095","wikidata":"https://www.wikidata.org/wiki/Q1335050","display_name":"Embodied cognition","level":2,"score":0.9473000168800354},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.6168000102043152},{"id":"https://openalex.org/C103683099","wikidata":"https://www.wikidata.org/wiki/Q5370102","display_name":"Embodied agent","level":3,"score":0.5593000054359436},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5314000248908997},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.5220000147819519},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5180000066757202},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.4593000113964081},{"id":"https://openalex.org/C192327766","wikidata":"https://www.wikidata.org/wiki/Q1038799","display_name":"Cognitive robotics","level":3,"score":0.45010000467300415},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3467999994754791},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.34369999170303345},{"id":"https://openalex.org/C188147891","wikidata":"https://www.wikidata.org/wiki/Q147638","display_name":"Cognitive science","level":1,"score":0.3273000121116638},{"id":"https://openalex.org/C2780148112","wikidata":"https://www.wikidata.org/wiki/Q1432581","display_name":"Proxy (statistics)","level":2,"score":0.3075000047683716},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.30730000138282776},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.30309998989105225},{"id":"https://openalex.org/C3017944768","wikidata":"https://www.wikidata.org/wiki/Q1450463","display_name":"Poison control","level":2,"score":0.2930999994277954},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.2879999876022339},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.28690001368522644},{"id":"https://openalex.org/C2776452267","wikidata":"https://www.wikidata.org/wiki/Q1503443","display_name":"Secrecy","level":2,"score":0.2858000099658966},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.2782000005245209},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.2709999978542328},{"id":"https://openalex.org/C52930066","wikidata":"https://www.wikidata.org/wiki/Q543","display_name":"Censorship","level":2,"score":0.25859999656677246},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.25859999656677246}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.01414","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.01414","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.01414","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.01414","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.7992066144943237,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Embodied":[0],"Large":[1],"Language":[2],"Models":[3],"(LLMs)":[4],"enable":[5],"AI":[6,155],"agents":[7],"to":[8,26,46,106,134,146,168,181,192],"interact":[9],"with":[10,31],"the":[11,22,72,148,178],"physical":[12,58,119],"world":[13],"through":[14],"natural":[15],"language":[16,185],"instructions":[17,38],"and":[18,57,140,157,187],"actions.":[19],"However,":[20],"beyond":[21,183],"language-level":[23],"risks":[24],"inherent":[25],"LLMs":[27,30,79],"themselves,":[28],"embodied":[29,78,91,154,194],"real-world":[32,48,81,159],"actuation":[33],"introduce":[34,64],"a":[35,51,102,143,158],"new":[36],"vulnerability:":[37],"that":[39,70,110,164],"appear":[40,111],"semantically":[41,112],"benign":[42],"may":[43],"still":[44],"lead":[45],"dangerous":[47],"consequences,":[49],"revealing":[50],"fundamental":[52],"misalignment":[53],"between":[54],"linguistic":[55],"security":[56],"outcomes.":[59],"In":[60],"this":[61],"paper,":[62],"we":[63],"Blindfold,":[65],"an":[66,95],"automated":[67],"attack":[68,149,171],"framework":[69],"leverages":[71],"limited":[73],"causal":[74],"reasoning":[75],"capabilities":[76],"of":[77,89],"in":[80,117],"action":[82],"contexts.":[83],"Rather":[84],"than":[85,174],"iterative":[86],"trial-and-error":[87],"jailbreaking":[88],"black-box":[90],"LLMs,":[92],"Blindfold":[93,123,165],"adopts":[94],"Adversarial":[96],"Proxy":[97],"Planning":[98],"strategy:":[99],"it":[100,141],"compromises":[101],"local":[103],"surrogate":[104],"LLM":[105],"perform":[107],"action-level":[108],"manipulations":[109],"safe":[113],"but":[114],"could":[115],"result":[116],"harmful":[118],"effects":[120],"when":[121],"executed.":[122],"further":[124],"conceals":[125],"key":[126],"malicious":[127],"actions":[128],"by":[129,137],"injecting":[130],"carefully":[131],"crafted":[132],"noise":[133],"evade":[135],"detection":[136],"defense":[138,190],"mechanisms,":[139],"incorporates":[142],"rule-based":[144],"verifier":[145],"improve":[147],"executability.":[150],"Evaluations":[151],"on":[152],"both":[153],"simulators":[156],"6DoF":[160],"robotic":[161],"arm":[162],"show":[163],"achieves":[166],"up":[167],"53%":[169],"higher":[170],"success":[172],"rates":[173],"SOTA":[175],"baselines,":[176],"highlighting":[177],"urgent":[179],"need":[180],"move":[182],"surface-level":[184],"censorship":[186],"toward":[188],"consequence-aware":[189],"mechanisms":[191],"secure":[193],"LLMs.":[195]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-03-04T00:00:00"}