{"id":"https://openalex.org/W7163375675","doi":"https://doi.org/10.48550/arxiv.2606.03556","title":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","display_name":"Partially Observable Adversarial Patch Attacks on Vision-Language-Action Models in Robotics","publication_year":2026,"publication_date":"2026-06-02","ids":{"openalex":"https://openalex.org/W7163375675","doi":"https://doi.org/10.48550/arxiv.2606.03556"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.03556","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.03556","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.03556","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137765467","display_name":"Xiaofei Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Xiaofei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025147896","display_name":"Mingliang Han","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Han, Mingliang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048029092","display_name":"Tianyu Hao","orcid":"https://orcid.org/0000-0001-6121-5898"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hao, Tianyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137714450","display_name":"Yi Yang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang, Yi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137788959","display_name":"Yun-Bo Zhao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhao, Yun-Bo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137804679","display_name":"Keke Tang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tang, Keke","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9743000268936157,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9743000268936157,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.0032999999821186066,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.003100000089034438,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8675000071525574},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7329999804496765},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.6615999937057495},{"id":"https://openalex.org/keywords/robot","display_name":"Robot","score":0.5892999768257141},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5819000005722046},{"id":"https://openalex.org/keywords/robotics","display_name":"Robotics","score":0.5351999998092651},{"id":"https://openalex.org/keywords/observable","display_name":"Observable","score":0.4749000072479248},{"id":"https://openalex.org/keywords/action","display_name":"Action (physics)","score":0.4616999924182892}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8675000071525574},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7531999945640564},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7329999804496765},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.6615999937057495},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6507999897003174},{"id":"https://openalex.org/C90509273","wikidata":"https://www.wikidata.org/wiki/Q11012","display_name":"Robot","level":2,"score":0.5892999768257141},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5819000005722046},{"id":"https://openalex.org/C34413123","wikidata":"https://www.wikidata.org/wiki/Q170978","display_name":"Robotics","level":3,"score":0.5351999998092651},{"id":"https://openalex.org/C32848918","wikidata":"https://www.wikidata.org/wiki/Q845789","display_name":"Observable","level":2,"score":0.4749000072479248},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.4616999924182892},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.4345000088214874},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.38119998574256897},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.34860000014305115},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.32100000977516174},{"id":"https://openalex.org/C26760741","wikidata":"https://www.wikidata.org/wiki/Q160402","display_name":"Perception","level":2,"score":0.3086000084877014},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3050999939441681},{"id":"https://openalex.org/C13662910","wikidata":"https://www.wikidata.org/wiki/Q193139","display_name":"Trajectory","level":2,"score":0.2928999960422516},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2865999937057495},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.2865000069141388},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.26579999923706055}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.03556","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.03556","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.03556","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.03556","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Vision-language-action":[0],"(VLA)":[1],"models":[2],"are":[3],"gaining":[4],"attention":[5,90],"in":[6,39,126,133],"robotics,":[7],"yet":[8],"their":[9],"robustness":[10],"to":[11,31,64,70,92,99,108],"adversarial":[12,21,144],"attacks":[13],"remains":[14],"largely":[15],"unexplored.":[16],"Existing":[17],"work":[18],"shows":[19],"that":[20,97,140],"patches":[22],"can":[23,55],"mislead":[24],"VLA-based":[25],"robots":[26],"but":[27],"assumes":[28],"full":[29,101],"access":[30],"the":[32,53,62,85,88,100,106,110,118],"entire":[33],"execution":[34],"trajectory,":[35],"an":[36],"unrealistic":[37],"requirement":[38],"practice.":[40],"We":[41],"address":[42],"this":[43,75],"limitation":[44],"by":[45],"formulating":[46],"a":[47,58,66,79],"partially":[48],"observable":[49],"threat":[50],"model,":[51],"where":[52],"adversary":[54],"exploit":[56],"only":[57],"short":[59],"prefix":[60],"of":[61,113,120],"trajectory":[63],"generate":[65],"fixed":[67],"patch":[68,86,107],"applied":[69],"all":[71],"subsequent":[72],"frames.":[73],"Under":[74],"setting,":[76],"we":[77,83,104],"propose":[78],"two-phase":[80],"framework.":[81],"First,":[82],"localize":[84],"using":[87],"model's":[89],"maps":[91],"identify":[93],"visually":[94],"critical":[95],"regions":[96],"correspond":[98],"instruction.":[102],"Then,":[103],"optimize":[105],"disrupt":[109],"semantic":[111],"grounding":[112],"target":[114],"objects":[115],"and":[116,129,135,152],"increase":[117],"curvature":[119],"action":[121],"trajectories,":[122],"thereby":[123],"compounding":[124],"failures":[125],"both":[127],"perception":[128],"control.":[130],"Extensive":[131],"experiments":[132],"simulation":[134],"real-world":[136],"robotic":[137],"environments":[138],"show":[139],"our":[141],"method":[142],"sustains":[143],"effects":[145],"under":[146],"partial":[147],"observability,":[148],"inducing":[149],"long-horizon":[150],"disruptions":[151],"significantly":[153],"reducing":[154],"task":[155],"success":[156],"rates.":[157]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-04T00:00:00"}