Paper Citation Record · LEDGER

Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

As of 9 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 25 inbound Pith citation observations for arXiv:2406.04031.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2406.04031 v2

Coverage vector

measured 0 of 0 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links

measured 25 of 25 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-09T06:31:02.800959+00:00

measured 25 of 25 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-09T18:05:52.403894Z

measured 1 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Reference resolution

0 of 0 outbound references displayed

verified exact0
verified fuzzy0
unresolved0
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

1
arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Outbound references

No outbound reference observations are available for this paper version.

Pith citing papers

Observation 30864464-a2bb-479a-9f5d-00825b8bef33 · inbound

Visual Adversarial Attack on Vision-Language Models for Autonomous Driving cites this paper.

Visual Adversarial Attack on Vision-Language Models for Autonomous Driving Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 58

Resolution: verified exact; arxiv_id, observed 2026-05-23T16:35:42.163051Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 80ed813d-ef3c-4083-beec-a5ac8fd8c19d · inbound

"I am bad": Interpreting Stealthy, Universal and Robust Audio Jailbreaks in Audio-Language Models cites this paper.

"I am bad": Interpreting Stealthy, Universal and Robust Audio Jailbreaks in Audio-Language Models Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 57

Resolution: unresolved; no resolver link, observed 2026-08-09T18:05:52.403894Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 17617b06-e3ce-4470-8cd3-2e1a01db0ce9 · inbound

A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations cites this paper.

A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 97

Resolution: unresolved; no resolver link, observed 2026-08-07T19:45:19.363130Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 44fc0931-9434-46b7-8d0d-cdbcfe1a0931 · inbound

Hierarchical Safety Realignment: Lightweight Restoration of Safety in Pruned Large Vision-Language Models cites this paper.

Hierarchical Safety Realignment: Lightweight Restoration of Safety in Pruned Large Vision-Language Models Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-07T15:11:05.926019Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0c0fbad8-071f-44db-a668-11ea5518a66c · inbound

Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers cites this paper.

Three Minds, One Legend: Jailbreak Large Reasoning Model with Adaptive Stacked Ciphers Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-07T15:08:13.366909Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8cf43540-c992-4d50-a46c-a9d45d12c8bf · inbound

Breaking the Ceiling: Exploring the Potential of Jailbreak Attacks through Expanding Strategy Space cites this paper.

Breaking the Ceiling: Exploring the Potential of Jailbreak Attacks through Expanding Strategy Space Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 55

Resolution: unresolved; no resolver link, observed 2026-08-07T13:36:00.334024Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2506fa70-0265-491c-9720-27f438d9d0da · inbound

Benign-to-Toxic Jailbreaking: Inducing Harmful Responses from Harmless Prompts cites this paper.

Benign-to-Toxic Jailbreaking: Inducing Harmful Responses from Harmless Prompts Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 60

Resolution: unresolved; no resolver link, observed 2026-08-07T14:01:11.165635Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 22298515-bd24-4400-84c9-790d5dad6e67 · inbound

Align is not Enough: Multimodal Universal Jailbreak Attack against Multimodal Large Language Models cites this paper.

Align is not Enough: Multimodal Universal Jailbreak Attack against Multimodal Large Language Models Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 41

Resolution: unresolved; no resolver link, observed 2026-08-07T11:51:32.894561Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 31c5f5a1-8f32-465e-965f-77fdacbc0fd4 · inbound

PRJ: Perception-Retrieval-Judgement for Generated Images cites this paper.

PRJ: Perception-Retrieval-Judgement for Generated Images Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-07T11:02:03.532221Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6195d26a-623c-434c-995a-39f5edcafdb9 · inbound

VSF-Med:A Vulnerability Scoring Framework for Medical Vision-Language Models cites this paper.

VSF-Med:A Vulnerability Scoring Framework for Medical Vision-Language Models Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-06T23:01:04.686795Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 667e004a-1aaf-4620-82b6-ff1b3d6d6ffe · inbound

SafeMobile: Chain-level Jailbreak Detection and Automated Evaluation for Multimodal Mobile Agents cites this paper.

SafeMobile: Chain-level Jailbreak Detection and Automated Evaluation for Multimodal Mobile Agents Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-06T21:11:18.221976Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 630d645b-ce3a-474b-bc30-f6c34f4e2371 · inbound

PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking cites this paper.

PRISM: Programmatic Reasoning with Image Sequence Manipulation for LVLM Jailbreaking Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 42

Resolution: verified exact; arxiv_id, observed 2026-05-19T03:37:01.063367Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 1d3abdd7-d341-43bb-b3d4-21e9f885d2f3 · inbound

Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation cites this paper.

Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 115

Resolution: unresolved; no resolver link, observed 2026-08-05T20:31:43.597526Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 38b60e6e-d2e0-4de8-8ba2-edb6f8936389 · inbound

Empowering Multimodal LLMs with External Tools: A Comprehensive Survey cites this paper.

Empowering Multimodal LLMs with External Tools: A Comprehensive Survey Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 232

Resolution: unresolved; no resolver link, observed 2026-08-05T20:29:06.610465Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d2d09ee6-0988-4a21-afbd-8110667ce07d · inbound

On Surjectivity of Neural Networks: Can you elicit any behavior from your model? cites this paper.

On Surjectivity of Neural Networks: Can you elicit any behavior from your model? Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 108

Resolution: unresolved; no resolver link, observed 2026-08-05T16:00:52.253832Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e4b34017-fd2e-46ab-84b7-de38e5014b22 · inbound

Evidence Recomposition and Predictive Context Residualization for Visual Attribution in Multimodal Large Language Models cites this paper.

Evidence Recomposition and Predictive Context Residualization for Visual Attribution in Multimodal Large Language Models Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-04T14:58:40.894740Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 172ab056-f2f2-4ede-aee0-38548d9ae382 · inbound

SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses cites this paper.

SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 221

Resolution: unresolved; no resolver link, observed 2026-08-04T09:25:58.141356Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7216e311-fdd7-4b39-96ea-783fb2e30473 · inbound

Semantic Router: On the Feasibility of Hijacking MLLMs via a Single Adversarial Perturbation cites this paper.

Semantic Router: On the Feasibility of Hijacking MLLMs via a Single Adversarial Perturbation Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-03T20:27:03.863353Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation caa29f76-9ae6-47f8-b5ef-2113bd0f7225 · inbound

A Patch-based Cross-view Regularized Framework for Backdoor Defense in Multimodal Large Language Models cites this paper.

A Patch-based Cross-view Regularized Framework for Backdoor Defense in Multimodal Large Language Models Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 7

Resolution: metadata mismatch; arxiv_id, observed 2026-05-10T22:05:49.112628Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation 46391421-e264-4d6e-9dc2-d895c864b488 · inbound

Multimodal Backdoor Attack on VLMs for Autonomous Driving via Graffiti and Cross-Lingual Triggers cites this paper.

Multimodal Backdoor Attack on VLMs for Autonomous Driving via Graffiti and Cross-Lingual Triggers Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 8

Resolution: metadata mismatch; arxiv_id, observed 2026-05-10T21:55:49.742793Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation bf63562f-4f2e-4eda-8cea-7c1cd4710d3b · inbound

LLM-as-Judge Framework for Evaluating Tone-Induced Hallucination in Vision-Language Models cites this paper.

LLM-as-Judge Framework for Evaluating Tone-Induced Hallucination in Vision-Language Models Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 37

Resolution: verified exact; arxiv_id, observed 2026-05-10T09:38:43.129002Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation cebbc9fd-bf29-4a68-b47e-4bf63477d9cf · inbound

Laundering AI Authority with Adversarial Examples cites this paper.

Laundering AI Authority with Adversarial Examples Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 69

Resolution: verified exact; arxiv_id, observed 2026-05-11T17:41:07.993730Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation fc0bf83b-9254-4bf7-bdc2-d4148539f05c · inbound

Localization then Neutralization: Gradient-guided Token Suppression against Visual Prompt Injection Attack cites this paper.

Localization then Neutralization: Gradient-guided Token Suppression against Visual Prompt Injection Attack Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 10

Resolution: metadata mismatch; arxiv_id, observed 2026-06-30T12:24:39.793465Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation a51ec3bc-a427-4317-886b-1db2d4d5f433 · inbound

Adversarial Diffusion Across Modalities: A Fusion Survey of Attacks, Defenses, and Evaluation for Text, Vision, and Vision-Language Models cites this paper.

Adversarial Diffusion Across Modalities: A Fusion Survey of Attacks, Defenses, and Evaluation for Text, Vision, and Vision-Language Models Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 77

Resolution: verified exact; arxiv_id, observed 2026-06-26T04:38:59.191152Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

Observation e2c429a6-3c47-4176-8030-153b619f6b56 · inbound

GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models cites this paper.

GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt

Reference 55

Resolution: unresolved; no resolver link, observed 2026-08-01T12:04:27.555375Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.