A test-time universal patch that perturbs only the first denoising step of a frozen flow-matching VLA derails nearly all LIBERO tasks, outperforming wider-step and action-space attacks.
Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages=
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CV 1years
2026 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
DRIFT: Derailing Denoising Trajectories of Flow-Matching VLAs with Adversarial Patch Attack
A test-time universal patch that perturbs only the first denoising step of a frozen flow-matching VLA derails nearly all LIBERO tasks, outperforming wider-step and action-space attacks.