A single poisoning phase can implant a backdoor that makes a VLM output attacker-selected caption text for previously unseen targets, using triggers synthesized in feature space at inference time.
Title resolution pending
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CV 1years
2026 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs
A single poisoning phase can implant a backdoor that makes a VLM output attacker-selected caption text for previously unseen targets, using triggers synthesized in feature space at inference time.