{"id":"https://openalex.org/W7163705147","doi":"https://doi.org/10.48550/arxiv.2606.06140","title":"RedEdit: Agentic Red-Teaming of Image Safety Classifiers via MCTS-Guided Photo-Editing","display_name":"RedEdit: Agentic Red-Teaming of Image Safety Classifiers via MCTS-Guided Photo-Editing","publication_year":2026,"publication_date":"2026-06-04","ids":{"openalex":"https://openalex.org/W7163705147","doi":"https://doi.org/10.48550/arxiv.2606.06140"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.06140","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.06140","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.06140","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5098979190","display_name":"Weilin Lin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lin, Weilin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137998468","display_name":"Ziqi Lin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lin, Ziqi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138009580","display_name":"Zhenxing Zhou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhou, Zhenxing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048630922","display_name":"Jianze Li","orcid":"https://orcid.org/0000-0002-0760-7994"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Jianze","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137941466","display_name":"Tong Zhang (103827)","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Tong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137952390","display_name":"Hui Xiong (541837)","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiong, Hui","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137965202","display_name":"Li Liu (75607)","orcid":"https://orcid.org/0000-0003-2566-7357"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Li","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7476000189781189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.7476000189781189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.05530000105500221,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.04820000007748604,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backtracking","display_name":"Backtracking","score":0.5608999729156494},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.5295000076293945},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5156999826431274},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.49970000982284546},{"id":"https://openalex.org/keywords/planner","display_name":"Planner","score":0.4603999853134155},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.42750000953674316},{"id":"https://openalex.org/keywords/tree","display_name":"Tree (set theory)","score":0.3797000050544739},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.35440000891685486},{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.3345000147819519}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7538999915122986},{"id":"https://openalex.org/C156884757","wikidata":"https://www.wikidata.org/wiki/Q798554","display_name":"Backtracking","level":2,"score":0.5608999729156494},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.5295000076293945},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5156999826431274},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5094000101089478},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.49970000982284546},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4625000059604645},{"id":"https://openalex.org/C2776999362","wikidata":"https://www.wikidata.org/wiki/Q2349274","display_name":"Planner","level":2,"score":0.4603999853134155},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.42750000953674316},{"id":"https://openalex.org/C113174947","wikidata":"https://www.wikidata.org/wiki/Q2859736","display_name":"Tree (set theory)","level":2,"score":0.3797000050544739},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.35440000891685486},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.3345000147819519},{"id":"https://openalex.org/C2780876879","wikidata":"https://www.wikidata.org/wiki/Q3054749","display_name":"Meaning (existential)","level":2,"score":0.3174000084400177},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.3149000108242035},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.3059000074863434},{"id":"https://openalex.org/C2776674983","wikidata":"https://www.wikidata.org/wiki/Q545981","display_name":"Image editing","level":3,"score":0.301800012588501},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.296999990940094},{"id":"https://openalex.org/C115908005","wikidata":"https://www.wikidata.org/wiki/Q2668364","display_name":"Combinatorial explosion","level":2,"score":0.29499998688697815},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.28439998626708984},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.27880001068115234},{"id":"https://openalex.org/C22367795","wikidata":"https://www.wikidata.org/wiki/Q7625208","display_name":"Structured prediction","level":2,"score":0.2728999853134155},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.27230000495910645},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.26030001044273376},{"id":"https://openalex.org/C13743948","wikidata":"https://www.wikidata.org/wiki/Q45842","display_name":"Web crawler","level":2,"score":0.2597000002861023},{"id":"https://openalex.org/C46149586","wikidata":"https://www.wikidata.org/wiki/Q11785332","display_name":"Monte Carlo tree search","level":3,"score":0.2574000060558319},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.2538999915122986},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.2529999911785126},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.25290000438690186}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.06140","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.06140","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.06140","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.06140","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5427215099334717}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Image":[0],"safety":[1],"classifiers":[2],"serve":[3],"as":[4,55],"a":[5,46,56,65,76],"critical":[6],"component":[7],"of":[8,102,134],"contemporary":[9],"content":[10,149],"moderation":[11],"systems":[12],"on":[13,120,130],"the":[14,94,164],"internet.":[15],"However,":[16],"their":[17],"resilience":[18],"against":[19],"user-style":[20],"malicious":[21,143,152],"image":[22],"editing":[23],"remains":[24,150],"underexplored.":[25],"Such":[26],"behaviors":[27],"are":[28],"highly":[29],"prevalent":[30],"in":[31],"daily":[32],"scenarios":[33],"but":[34],"difficult":[35],"to":[36,69,83,112,137,153,163,169],"fully":[37],"reproduce.":[38],"To":[39],"explore":[40],"this":[41,114,170],"vulnerability,":[42],"we":[43],"introduce":[44],"RedEdit,":[45],"novel":[47],"black-box":[48],"red-teaming":[49],"agent":[50],"that":[51,146],"formulates":[52],"photo-editing":[53],"evasion":[54],"combinatorial":[57],"search":[58],"problem":[59],"over":[60],"edit-tool":[61],"sequences.":[62],"It":[63],"adopts":[64],"Vision-Language-Model":[66],"(VLM)-based":[67],"proposer":[68,95],"generate":[70],"semantically":[71],"targeted":[72],"candidate":[73],"edits":[74,129],"and":[75,96,108],"Monte":[77],"Carlo":[78],"Tree":[79],"Search":[80],"(MCTS)":[81],"planner":[82,97],"prioritize":[84],"promising":[85],"edit":[86],"paths":[87],"while":[88,140,155],"backtracking":[89],"from":[90],"ineffective":[91],"ones.":[92],"Together,":[93],"instantiate":[98],"two":[99,128],"key":[100],"capabilities":[101],"human":[103],"attackers,":[104],"i.e.,":[105],"domain":[106],"knowledge":[107],"iterative":[109],"backtracking,":[110],"respectively,":[111],"reproduce":[113],"practical":[115,172],"threat.":[116,173],"Our":[117],"extensive":[118],"experiments":[119],"UnsafeBench":[121],"reveal":[122],"profound":[123],"systemic":[124],"vulnerabilities:":[125],"fewer":[126],"than":[127],"average":[131],"enable":[132],"76.2%":[133],"unsafe":[135],"images":[136],"evade":[138],"detectors,":[139],"retaining":[141],"93.0%":[142],"semantics,":[144],"meaning":[145],"such":[147],"manipulated":[148],"perceptually":[151],"humans":[154],"easily":[156],"bypassing":[157],"automated":[158],"moderation.":[159],"We":[160],"therefore":[161],"appeal":[162],"community":[165],"for":[166],"more":[167],"attention":[168],"overlooked":[171]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-06T00:00:00"}