{"id":"https://openalex.org/W7164043022","doi":"https://doi.org/10.48550/arxiv.2606.09499","title":"Targeting World Models to Compromise Robot Learning Pipelines","display_name":"Targeting World Models to Compromise Robot Learning Pipelines","publication_year":2026,"publication_date":"2026-06-08","ids":{"openalex":"https://openalex.org/W7164043022","doi":"https://doi.org/10.48550/arxiv.2606.09499"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.09499","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.09499","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.09499","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138234645","display_name":"Ethan Rathbun","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rathbun, Ethan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057568939","display_name":"Ahmed Agha","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Agha, Ahmed","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056120915","display_name":"Saaduddin Mahmud","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mahmud, Saaduddin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138222757","display_name":"Christopher Amato","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Amato, Christopher","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138269213","display_name":"Alina Oprea","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Oprea, Alina","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5138210277","display_name":"Eugene Bagdasarian","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bagdasarian, Eugene","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8776999711990356,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8776999711990356,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10883","display_name":"Ethics and Social Impacts of AI","score":0.01979999989271164,"subfield":{"id":"https://openalex.org/subfields/3311","display_name":"Safety Research"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10462","display_name":"Reinforcement Learning in Robotics","score":0.00839999970048666,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robot","display_name":"Robot","score":0.5612999796867371},{"id":"https://openalex.org/keywords/teleoperation","display_name":"Teleoperation","score":0.43130001425743103},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.41040000319480896},{"id":"https://openalex.org/keywords/interdiction","display_name":"Interdiction","score":0.40470001101493835},{"id":"https://openalex.org/keywords/action","display_name":"Action (physics)","score":0.3626999855041504},{"id":"https://openalex.org/keywords/reinforcement-learning","display_name":"Reinforcement learning","score":0.3312999904155731},{"id":"https://openalex.org/keywords/social-robot","display_name":"Social robot","score":0.33070001006126404},{"id":"https://openalex.org/keywords/robot-learning","display_name":"Robot learning","score":0.31929999589920044}],"concepts":[{"id":"https://openalex.org/C90509273","wikidata":"https://www.wikidata.org/wiki/Q11012","display_name":"Robot","level":2,"score":0.5612999796867371},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4560999870300293},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.45559999346733093},{"id":"https://openalex.org/C161759796","wikidata":"https://www.wikidata.org/wiki/Q3982902","display_name":"Teleoperation","level":3,"score":0.43130001425743103},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4244000017642975},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.420199990272522},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.41040000319480896},{"id":"https://openalex.org/C124119293","wikidata":"https://www.wikidata.org/wiki/Q6046081","display_name":"Interdiction","level":2,"score":0.40470001101493835},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.3626999855041504},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.3312999904155731},{"id":"https://openalex.org/C162947575","wikidata":"https://www.wikidata.org/wiki/Q2005645","display_name":"Social robot","level":5,"score":0.33070001006126404},{"id":"https://openalex.org/C188888258","wikidata":"https://www.wikidata.org/wiki/Q7353390","display_name":"Robot learning","level":4,"score":0.31929999589920044},{"id":"https://openalex.org/C2780586970","wikidata":"https://www.wikidata.org/wiki/Q1357284","display_name":"Popularity","level":2,"score":0.31619998812675476},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.3149999976158142},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.3082999885082245},{"id":"https://openalex.org/C34413123","wikidata":"https://www.wikidata.org/wiki/Q170978","display_name":"Robotics","level":3,"score":0.29670000076293945},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.2874999940395355},{"id":"https://openalex.org/C71901391","wikidata":"https://www.wikidata.org/wiki/Q7126699","display_name":"Upload","level":2,"score":0.2874999940395355},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2718999981880188},{"id":"https://openalex.org/C2775935494","wikidata":"https://www.wikidata.org/wiki/Q741964","display_name":"Search and rescue","level":3,"score":0.2660999894142151},{"id":"https://openalex.org/C46355384","wikidata":"https://www.wikidata.org/wiki/Q726686","display_name":"Compromise","level":2,"score":0.2635999917984009},{"id":"https://openalex.org/C108713360","wikidata":"https://www.wikidata.org/wiki/Q1824206","display_name":"Supply chain","level":2,"score":0.25940001010894775},{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.25290000438690186},{"id":"https://openalex.org/C65401140","wikidata":"https://www.wikidata.org/wiki/Q7353385","display_name":"Robot control","level":4,"score":0.2515999972820282}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.09499","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.09499","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.09499","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.09499","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"World":[0],"models":[1,50,199],"have":[2],"recently":[3],"seen":[4],"a":[5,52,129,174,179,184],"rapid":[6],"growth":[7],"in":[8,43,70,137],"both":[9,161],"their":[10,33,202],"popularity":[11],"and":[12,55,146,168,183,200],"capability":[13],"as":[14,132],"more":[15,196],"data":[16,23,57,93],"efficient":[17],"tools":[18],"for":[19,186],"generating":[20],"robot":[21,37,63,143,151,206],"training":[22,81,87,144],"or":[24,75,103,113,149],"simulating":[25],"real":[26],"world":[27,49,130,171,198],"environments,":[28],"with":[29],"many":[30],"works":[31],"proposing":[32],"integration":[34],"into":[35,61,101,117,195],"the":[36,62,71,138,155,164,187,205],"learning":[38,64,207],"pipeline.":[39],"While":[40],"highly":[41],"practical,":[42],"this":[44],"work":[45],"we":[46],"demonstrate":[47,154],"that":[48,67],"introduce":[51],"uniquely":[53],"stealthy":[54],"effective":[56],"poisoning":[58,94],"entry":[59],"point":[60],"supply":[65,208],"chain":[66],"can":[68,135],"result":[69,136],"deployment":[72],"of":[73,140,157,163],"unsafe":[74,148],"otherwise":[76],"compromised":[77,150],"robotic":[78],"policies":[79],"despite":[80],"on":[82,178],"seemingly":[83],"safe":[84,119],"ground":[85],"truth":[86],"data.":[88],"In":[89],"contrast":[90],"to":[91],"traditional":[92],"techniques":[95],"which":[96,122],"directly":[97],"implant":[98],"dangerous":[99,142],"trajectories":[100,145],"sold":[102],"uploaded":[104],"datasets,":[105],"our":[106,158],"novel":[107],"attack":[108],"methods":[109],"inject":[110],"malicious":[111],"prompts":[112],"compromising":[114],"transition":[115],"dynamics":[116],"visibly":[118],"teleoperated":[120],"datasets":[121],"are":[123],"only":[124],"activated":[125],"once":[126],"fed":[127],"through":[128],"model":[131],"input.":[133],"This":[134],"generation":[139],"synthetic,":[141],"subsequently":[147],"policies.":[152],"We":[153],"effectiveness":[156],"attacks":[159],"against":[160],"state":[162],"art":[165],"action":[166],"conditioned":[167,170],"text":[169],"models,":[172],"showing":[173],"full":[175],"end-to-end":[176],"backdoor":[177],"downstream":[180],"DRL":[181],"policy":[182],"proof-of-concept":[185],"VLA":[188],"setting.":[189],"Overall":[190],"these":[191],"findings":[192],"necessitate":[193],"research":[194],"secure":[197],"reevaluating":[201],"position":[203],"within":[204],"chain.":[209]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-10T00:00:00"}