{"id":"https://openalex.org/W7161596873","doi":"https://doi.org/10.48550/arxiv.2605.15641","title":"Propagating Unsafe Actions in LLM Controlled Multi-Robot Collaboration via Single Robot Compromise","display_name":"Propagating Unsafe Actions in LLM Controlled Multi-Robot Collaboration via Single Robot Compromise","publication_year":2026,"publication_date":"2026-05-15","ids":{"openalex":"https://openalex.org/W7161596873","doi":"https://doi.org/10.48550/arxiv.2605.15641"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.15641","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.15641","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.15641","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136413834","display_name":"Zhen Huang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Huang, Zhen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136395795","display_name":"Zhihuang Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Zhihuang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Luo, Mengxuan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Luo, Mengxuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136359382","display_name":"Weishang Wu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wu, Weishang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":null,"display_name":"Cai, Zhiping","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cai, Zhiping","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.46140000224113464,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.46140000224113464,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.0869000032544136,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10709","display_name":"Social Robot Interaction and HRI","score":0.05779999867081642,"subfield":{"id":"https://openalex.org/subfields/3207","display_name":"Social Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robot","display_name":"Robot","score":0.784500002861023},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.6614999771118164},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6575000286102295},{"id":"https://openalex.org/keywords/compromise","display_name":"Compromise","score":0.6169000267982483},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.5196999907493591},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.508899986743927},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.44690001010894775},{"id":"https://openalex.org/keywords/bridge","display_name":"Bridge (graph theory)","score":0.3862999975681305},{"id":"https://openalex.org/keywords/embodied-cognition","display_name":"Embodied cognition","score":0.3695000112056732}],"concepts":[{"id":"https://openalex.org/C90509273","wikidata":"https://www.wikidata.org/wiki/Q11012","display_name":"Robot","level":2,"score":0.784500002861023},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7225000262260437},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.6614999771118164},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6575000286102295},{"id":"https://openalex.org/C46355384","wikidata":"https://www.wikidata.org/wiki/Q726686","display_name":"Compromise","level":2,"score":0.6169000267982483},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5738999843597412},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.5196999907493591},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.508899986743927},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.44690001010894775},{"id":"https://openalex.org/C100776233","wikidata":"https://www.wikidata.org/wiki/Q2532492","display_name":"Bridge (graph theory)","level":2,"score":0.3862999975681305},{"id":"https://openalex.org/C100609095","wikidata":"https://www.wikidata.org/wiki/Q1335050","display_name":"Embodied cognition","level":2,"score":0.3695000112056732},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3695000112056732},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.36399999260902405},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.3418999910354614},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3375999927520752},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.3294000029563904},{"id":"https://openalex.org/C179958297","wikidata":"https://www.wikidata.org/wiki/Q1456974","display_name":"Obedience","level":2,"score":0.3091999888420105},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.30640000104904175},{"id":"https://openalex.org/C2776654903","wikidata":"https://www.wikidata.org/wiki/Q2601463","display_name":"SAFER","level":2,"score":0.2994000017642975},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.29260000586509705},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2915000021457672},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.2856999933719635},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.28119999170303345},{"id":"https://openalex.org/C145460709","wikidata":"https://www.wikidata.org/wiki/Q859951","display_name":"Human\u2013robot interaction","level":3,"score":0.2766999900341034},{"id":"https://openalex.org/C199776023","wikidata":"https://www.wikidata.org/wiki/Q202875","display_name":"Negotiation","level":2,"score":0.2669999897480011},{"id":"https://openalex.org/C89611455","wikidata":"https://www.wikidata.org/wiki/Q6804646","display_name":"Mechanism (biology)","level":2,"score":0.25540000200271606}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.15641","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.15641","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.15641","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.15641","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.7463420629501343,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large":[0],"language":[1],"models":[2],"(LLMs)":[3],"are":[4,205],"increasingly":[5],"used":[6],"as":[7,186,188,217],"general":[8],"planners":[9,35],"in":[10,58,65,93,144,170,213],"embodied":[11,33],"intelligence,":[12],"enabling":[13],"high":[14,125],"level":[15,19],"coordination":[16,225],"and":[17,26,134,156,164,174],"low":[18],"task":[20],"planning":[21],"for":[22,90],"both":[23,160],"single":[24,59,101],"robot":[25,60,75,106],"multi-robot":[27,68,91,145],"collaboration.":[28],"This":[29],"increasing":[30],"reliance":[31],"on":[32],"LLM":[34,66],"also":[36],"raises":[37],"critical":[38,214],"security":[39,63],"concerns,":[40],"since":[41],"misaligned":[42],"or":[43,219],"manipulated":[44],"instructions":[45,231],"can":[46,227],"be":[47],"translated":[48],"into":[49],"physical":[50],"actions.":[51],"Prior":[52],"work":[53],"has":[54],"studied":[55],"such":[56,216],"threats":[57],"settings,":[61],"while":[62,196],"risks":[64,204],"controlled":[67],"collaboration,":[69],"especially":[70],"those":[71],"propagated":[72],"through":[73,111],"inter":[74],"communication,":[76,113],"remain":[77],"largely":[78],"unexplored.":[79],"To":[80],"bridge":[81],"this":[82,149],"gap,":[83],"we":[84],"propose":[85],"a":[86,100,139,198],"novel":[87],"attack":[88,181],"paradigm":[89],"system":[92],"which":[94],"the":[95,120,171,180,194,224],"adversary":[96],"interacts":[97],"with":[98,151],"only":[99],"entry":[102],"robot.":[103],"The":[104,236],"compromised":[105],"then":[107],"propagates":[108],"malicious":[109],"intent":[110],"peer":[112],"leading":[114],"to":[115,177,191,232],"coordinated":[116],"unsafe":[117],"actions":[118],"across":[119],"system.":[121],"Our":[122],"evaluation,":[123],"covering":[124],"risk":[126],"dimensions":[127],"of":[128,130,201,221],"dereliction":[129],"duty,":[131],"privacy":[132],"compromise,":[133],"public":[135],"safety":[136,141,234],"hazards,":[137],"reveals":[138],"persistent":[140,161],"alignment":[142],"gap":[143],"planners.":[146],"We":[147],"quantify":[148],"process":[150],"three":[152],"metrics,":[153],"obedience,":[154],"infectiousness,":[155],"stealthiness.":[157],"Experiments":[158],"demonstrate":[159],"attacker":[162],"control":[163],"rapid":[165],"propagation:":[166],"obedience":[167],"reaches":[168],"1.00":[169],"strongest":[172],"cases,":[173],"infectiousness":[175],"rises":[176],"0.90.":[178],"Notably,":[179],"is":[182,238],"highly":[183],"efficient,":[184],"requiring":[185],"few":[187],"3.0":[189],"rounds":[190],"compromise":[192],"all":[193],"robots":[195,208],"maintaining":[197],"stealthiness":[199],"score":[200],"0.81.":[202],"Such":[203],"amplified":[206],"when":[207],"must":[209],"resolve":[210],"trade":[211],"offs":[212],"situations,":[215],"emergencies":[218],"conflicts":[220],"rights,":[222],"because":[223],"mechanism":[226],"unintentionally":[228],"allow":[229],"adversarial":[230],"override":[233],"requirements.":[235],"code":[237],"available":[239],"at":[240],"https://github.com/TheFatInsect/InfectBot.":[241]},"counts_by_year":[],"updated_date":"2026-07-21T08:15:58.654021","created_date":"2026-05-19T00:00:00"}