{"id":"https://openalex.org/W7154494198","doi":"https://doi.org/10.48550/arxiv.2604.12833","title":"Challenging Vision-Language Models with Physically Deployable Multimodal Semantic Lighting Attacks","display_name":"Challenging Vision-Language Models with Physically Deployable Multimodal Semantic Lighting Attacks","publication_year":2026,"publication_date":"2026-04-14","ids":{"openalex":"https://openalex.org/W7154494198","doi":"https://doi.org/10.48550/arxiv.2604.12833"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.12833","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.12833","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.12833","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5133701127","display_name":"Yingying Zhao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhao, Yingying","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017525809","display_name":"Chengyin Hu","orcid":"https://orcid.org/0009-0006-9589-0182"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Chengyin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109316415","display_name":"Qike Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Qike","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133687700","display_name":"Xin Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Xin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133709098","display_name":"Xin Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Xin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133651266","display_name":"Yiwei Wei","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wei, Yiwei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070224461","display_name":"Jiujiang Guo","orcid":"https://orcid.org/0000-0001-8614-4643"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Guo, Jiujiang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133686955","display_name":"Jiahuan Long","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Long, Jiahuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133703892","display_name":"Tingsong Jiang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiang, Tingsong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5133642568","display_name":"Wen Yao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yao, Wen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.963699996471405,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.963699996471405,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.00839999970048666,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.0066999997943639755,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7181000113487244},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6775000095367432},{"id":"https://openalex.org/keywords/closed-captioning","display_name":"Closed captioning","score":0.6518999934196472},{"id":"https://openalex.org/keywords/semantic-gap","display_name":"Semantic gap","score":0.5515000224113464},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.46230000257492065},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.4350999891757965},{"id":"https://openalex.org/keywords/semantic-security","display_name":"Semantic security","score":0.33649998903274536}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.763700008392334},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7181000113487244},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6775000095367432},{"id":"https://openalex.org/C157657479","wikidata":"https://www.wikidata.org/wiki/Q2367247","display_name":"Closed captioning","level":3,"score":0.6518999934196472},{"id":"https://openalex.org/C86034646","wikidata":"https://www.wikidata.org/wiki/Q474311","display_name":"Semantic gap","level":4,"score":0.5515000224113464},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.46230000257492065},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.4350999891757965},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.4174000024795532},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4124000072479248},{"id":"https://openalex.org/C204806902","wikidata":"https://www.wikidata.org/wiki/Q2333581","display_name":"Semantic security","level":5,"score":0.33649998903274536},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3260999917984009},{"id":"https://openalex.org/C2775955345","wikidata":"https://www.wikidata.org/wiki/Q7449071","display_name":"Semantic mapping","level":2,"score":0.3109000027179718},{"id":"https://openalex.org/C90312973","wikidata":"https://www.wikidata.org/wiki/Q7449052","display_name":"Semantic data model","level":2,"score":0.3098999857902527},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.29089999198913574},{"id":"https://openalex.org/C2777617010","wikidata":"https://www.wikidata.org/wiki/Q18957","display_name":"Mainstream","level":2,"score":0.2784000039100647},{"id":"https://openalex.org/C6881194","wikidata":"https://www.wikidata.org/wiki/Q7449091","display_name":"Semantic technology","level":4,"score":0.2718999981880188},{"id":"https://openalex.org/C2776157020","wikidata":"https://www.wikidata.org/wiki/Q851598","display_name":"Physical security","level":2,"score":0.25459998846054077},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.25369998812675476}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.12833","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.12833","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.12833","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.12833","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Vision-Language":[0],"Models":[1],"(VLMs)":[2],"have":[3,55],"shown":[4],"remarkable":[5],"performance,":[6],"yet":[7],"their":[8,89],"security":[9,91],"remains":[10],"insufficiently":[11],"understood.":[12],"Existing":[13],"adversarial":[14,41,108,116],"studies":[15],"focus":[16],"almost":[17],"exclusively":[18],"on":[19,83],"the":[20,104,185,206],"digital":[21,169],"setting,":[22],"leaving":[23],"physical-world":[24,210],"threats":[25],"largely":[26],"unexplored.":[27],"As":[28],"VLMs":[29,54,84,151,189],"are":[30,190],"increasingly":[31],"deployed":[32],"in":[33,76,123,149,167],"real":[34,124],"environments,":[35],"this":[36,48,95],"gap":[37,203],"becomes":[38],"critical,":[39],"since":[40],"perturbations":[42],"must":[43],"be":[44],"physically":[45,106,194],"realizable.":[46,181],"Despite":[47],"practical":[49],"relevance,":[50],"physical":[51,81,171],"attacks":[52,61,82],"against":[53,111],"not":[56],"been":[57],"systematically":[58],"studied.":[59],"Such":[60],"may":[62],"induce":[63],"recognition":[64],"failures":[65],"and":[66,155,160,170,179,204],"further":[67],"disrupt":[68,119],"multimodal":[69,120],"reasoning,":[70],"leading":[71],"to":[72,118,193],"severe":[73,146],"semantic":[74,121,127,147,196],"misinterpretation":[75],"downstream":[77],"tasks.":[78],"Therefore,":[79],"investigating":[80],"is":[85,176],"essential":[86],"for":[87,209],"assessing":[88],"real-world":[90],"risks.":[92],"To":[93],"address":[94],"gap,":[96],"we":[97],"propose":[98],"Multimodal":[99],"Semantic":[100],"Lighting":[101],"Attacks":[102],"(MSLA),":[103],"first":[105,186],"deployable":[107,195],"attack":[109],"framework":[110],"VLMs.":[112,214],"MSLA":[113,175],"uses":[114],"controllable":[115],"lighting":[117],"understanding":[122],"scenes,":[125],"attacking":[126],"alignment":[128],"rather":[129],"than":[130],"only":[131],"task-specific":[132],"outputs.":[133],"Consequently,":[134],"it":[135],"degrades":[136],"zero-shot":[137],"classification":[138],"performance":[139],"of":[140,213],"mainstream":[141],"CLIP":[142],"variants":[143],"while":[144],"inducing":[145],"hallucinations":[148],"advanced":[150],"such":[152],"as":[153],"LLaVA":[154],"BLIP":[156],"across":[157],"image":[158],"captioning":[159],"visual":[161],"question":[162],"answering":[163],"(VQA).":[164],"Extensive":[165],"experiments":[166],"both":[168],"domains":[172],"demonstrate":[173],"that":[174,188],"effective,":[177],"transferable,":[178],"practically":[180],"Our":[182],"findings":[183],"provide":[184],"evidence":[187],"highly":[191],"vulnerable":[192],"attacks,":[197],"exposing":[198],"a":[199],"previously":[200],"overlooked":[201],"robustness":[202,211],"underscoring":[205],"urgent":[207],"need":[208],"evaluation":[212]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-04-16T00:00:00"}