{"id":"https://openalex.org/W7161728523","doi":"https://doi.org/10.48550/arxiv.2605.17310","title":"Attention Hijacking: Response Manipulation Across Queries in Vision-Language Models","display_name":"Attention Hijacking: Response Manipulation Across Queries in Vision-Language Models","publication_year":2026,"publication_date":"2026-05-17","ids":{"openalex":"https://openalex.org/W7161728523","doi":"https://doi.org/10.48550/arxiv.2605.17310"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.17310","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17310","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.17310","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136499697","display_name":"Zhiqiang Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Zhiqiang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136462819","display_name":"Dongrui Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Dongrui","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136456597","display_name":"Yan Li","orcid":"https://orcid.org/0009-0001-0180-054X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Yan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020945039","display_name":"Zonghao Ying","orcid":"https://orcid.org/0009-0007-7393-7362"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ying, Zonghao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136459830","display_name":"Wei Xue","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xue, Wei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136468992","display_name":"Wenhan Luo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Luo, Wenhan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136489362","display_name":"Yike Guo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Guo, Yike","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.78329998254776,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.78329998254776,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.08820000290870667,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.024900000542402267,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.879800021648407},{"id":"https://openalex.org/keywords/transferability","display_name":"Transferability","score":0.7294999957084656},{"id":"https://openalex.org/keywords/stability","display_name":"Stability (learning theory)","score":0.48249998688697815},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.37709999084472656},{"id":"https://openalex.org/keywords/margin","display_name":"Margin (machine learning)","score":0.34880000352859497}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.879800021648407},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.765500009059906},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.7294999957084656},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.48890000581741333},{"id":"https://openalex.org/C112972136","wikidata":"https://www.wikidata.org/wiki/Q7595718","display_name":"Stability (learning theory)","level":2,"score":0.48249998688697815},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.37709999084472656},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.36640000343322754},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.34880000352859497},{"id":"https://openalex.org/C2776175482","wikidata":"https://www.wikidata.org/wiki/Q1195816","display_name":"Transfer (computing)","level":2,"score":0.33820000290870667},{"id":"https://openalex.org/C2986089797","wikidata":"https://www.wikidata.org/wiki/Q6501338","display_name":"Visual attention","level":3,"score":0.28619998693466187}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.17310","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17310","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.17310","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17310","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Existing":[0],"adversarial":[1,40,86],"attacks":[2,58],"on":[3,106,127,136],"vision-language":[4],"models":[5],"(VLMs)":[6],"can":[7],"steer":[8],"model":[9],"outputs":[10],"toward":[11,94],"attacker-specified":[12],"target":[13,107,150],"responses,":[14],"but":[15],"their":[16],"effectiveness":[17],"often":[18],"degrades":[19],"when":[20],"the":[21,54,78,101,112,121,124,128,132,168],"same":[22],"perturbed":[23],"input":[24],"is":[25,42,64],"paired":[26],"with":[27,67],"different":[28],"textual":[29,116],"queries.":[30,50,154],"This":[31],"paper":[32],"studies":[33],"cross-query":[34,146],"response":[35,74,108,175],"manipulation,":[36],"where":[37],"a":[38,84,95],"single":[39],"example":[41],"expected":[43],"to":[44,160],"remain":[45],"effective":[46],"across":[47,148],"diverse":[48,149],"user":[49],"We":[51],"first":[52],"analyze":[53],"limitations":[55],"of":[56,103,115,123,131,170],"existing":[57],"and":[59,152],"find":[60],"that":[61,88,141],"successful":[62],"transfer":[63],"closely":[65],"associated":[66],"preserving":[68],"an":[69],"image-dominant":[70,97],"attention":[71,92,171],"pattern":[72],"during":[73],"generation.":[75],"Motivated":[76],"by":[77],"observation,":[79],"we":[80],"propose":[81],"\\textbf{Attention":[82],"Hijacking},":[83],"novel":[85],"attack":[87,162],"explicitly":[89],"steers":[90],"internal":[91],"distributions":[93],"persistent":[96],"pattern.":[98],"By":[99],"amplifying":[100],"influence":[102,114],"visual":[104],"tokens":[105,109],"while":[110],"suppressing":[111],"competing":[113],"tokens,":[117],"our":[118],"method":[119,156],"reduces":[120],"dependence":[122],"manipulated":[125],"output":[126],"specific":[129],"wording":[130],"query.":[133],"Extensive":[134],"experiments":[135],"widely":[137],"used":[138],"VLMs":[139],"show":[140],"Attention":[142],"Hijacking":[143],"substantially":[144],"improves":[145],"transferability":[147],"responses":[151],"unseen":[153],"The":[155],"also":[157],"extends":[158],"effectively":[159],"multiple":[161],"scenarios,":[163],"offering":[164],"new":[165],"insights":[166],"into":[167],"role":[169],"stability":[172],"in":[173],"transferable":[174],"manipulation":[176],"for":[177],"VLMs.":[178]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-20T00:00:00"}