{"id":"https://openalex.org/W7156368258","doi":"https://doi.org/10.48550/arxiv.2604.22591","title":"RedVLA: Physical Red Teaming for Vision-Language-Action Models","display_name":"RedVLA: Physical Red Teaming for Vision-Language-Action Models","publication_year":2026,"publication_date":"2026-04-24","ids":{"openalex":"https://openalex.org/W7156368258","doi":"https://doi.org/10.48550/arxiv.2604.22591"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.22591","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.22591","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.22591","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5134702235","display_name":"Yuhao Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Yuhao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134722623","display_name":"Borong Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Borong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134679247","display_name":"Jiaming Fan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fan, Jiaming","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134668566","display_name":"Jiachen Shen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shen, Jiachen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089424740","display_name":"Yishuai Cai","orcid":"https://orcid.org/0000-0001-7471-7301"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cai, Yishuai","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134674417","display_name":"Yaodong Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Yaodong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5134740533","display_name":"Jiaming Ji","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ji, Jiaming","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.7793999910354614,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.7793999910354614,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.0738999992609024,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10036","display_name":"Advanced Neural Network Applications","score":0.03229999914765358,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.6758999824523926},{"id":"https://openalex.org/keywords/guard","display_name":"Guard (computer science)","score":0.5831000208854675},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.42820000648498535},{"id":"https://openalex.org/keywords/trajectory","display_name":"Trajectory","score":0.40459999442100525},{"id":"https://openalex.org/keywords/risk-management","display_name":"Risk management","score":0.3269999921321869},{"id":"https://openalex.org/keywords/risk-assessment","display_name":"Risk assessment","score":0.3111000061035156},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.30329999327659607}],"concepts":[{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.6758999824523926},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.633400022983551},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.5831000208854675},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.47760000824928284},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.42820000648498535},{"id":"https://openalex.org/C13662910","wikidata":"https://www.wikidata.org/wiki/Q193139","display_name":"Trajectory","level":2,"score":0.40459999442100525},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.3269999921321869},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.3111000061035156},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.30329999327659607},{"id":"https://openalex.org/C2781039887","wikidata":"https://www.wikidata.org/wiki/Q1391724","display_name":"Factor (programming language)","level":2,"score":0.2994000017642975},{"id":"https://openalex.org/C2984019128","wikidata":"https://www.wikidata.org/wiki/Q1637433","display_name":"Physical modelling","level":2,"score":0.2888000011444092},{"id":"https://openalex.org/C132835097","wikidata":"https://www.wikidata.org/wiki/Q7663745","display_name":"System safety","level":2,"score":0.28279998898506165},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2793000042438507},{"id":"https://openalex.org/C50440223","wikidata":"https://www.wikidata.org/wiki/Q1475848","display_name":"Risk factor","level":2,"score":0.2775999903678894},{"id":"https://openalex.org/C81293917","wikidata":"https://www.wikidata.org/wiki/Q4189534","display_name":"System deployment","level":3,"score":0.2685000002384186},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.25760000944137573}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.22591","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.22591","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.22591","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.22591","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.5016292333602905,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0],"real-world":[1],"deployment":[2],"of":[3,12],"Vision-Language-Action":[4],"(VLA)":[5],"models":[6,132],"remains":[7],"limited":[8],"by":[9,124],"the":[10,40,83,94,116,142],"risk":[11,70,84,117],"unpredictable":[13],"and":[14,67,81,98,140,170],"irreversible":[15],"physical":[16,28,46],"harm.":[17],"However,":[18],"we":[19,37,155],"currently":[20],"lack":[21],"effective":[22],"mechanisms":[23],"to":[24,90,145],"proactively":[25],"detect":[26],"these":[27,87,153],"safety":[29,47,161],"risks":[30],"before":[31],"deployment.":[32],"To":[33,151],"address":[34],"this":[35],"gap,":[36],"propose":[38,157],"\\textbf{RedVLA},":[39],"first":[41],"red":[42],"teaming":[43],"framework":[44],"for":[45],"in":[48],"VLA":[49,131],"models.":[50,112],"We":[51],"systematically":[52],"uncover":[53],"unsafe":[54,102,138],"behaviors":[55,139],"through":[56,120],"a":[57,65,100,159],"two-stage":[58],"process:":[59],"(I)":[60],"\\textbf{Risk":[61,105],"Scenario":[62],"Synthesis}":[63],"constructs":[64],"valid":[66],"task-feasible":[68],"initial":[69],"scene.":[71],"Specifically,":[72],"it":[73,92],"identifies":[74],"critical":[75],"interaction":[76],"regions":[77],"from":[78,164],"benign":[79],"trajectories":[80],"positions":[82],"factor":[85,118],"within":[86,147],"regions,":[88],"aiming":[89],"entangle":[91],"with":[93],"VLA's":[95],"execution":[96],"flow":[97],"elicit":[99],"target":[101],"behavior.":[103],"(II)":[104],"Amplification}":[106],"ensures":[107],"stable":[108],"elicitation":[109],"across":[110],"heterogeneous":[111],"It":[113],"iteratively":[114],"refines":[115],"state":[119],"gradient-free":[121],"optimization":[122,149],"guided":[123],"trajectory":[125],"features.":[126],"Experiments":[127],"on":[128],"six":[129],"representative":[130],"show":[133],"that":[134],"RedVLA":[135],"uncovers":[136],"diverse":[137],"achieves":[141],"ASR":[143],"up":[144],"95.5\\%":[146],"10":[148],"iterations.":[150],"mitigate":[152],"risks,":[154],"further":[156],"SimpleVLA-Guard,":[158],"lightweight":[160],"guard":[162],"built":[163],"RedVLA-generated":[165],"data.":[166],"Our":[167],"data,":[168],"assets,":[169],"code":[171],"are":[172],"available":[173],"\\href{https://redvla.github.io}{here}.":[174]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-04-28T00:00:00"}