{"as_of":"2026-08-08T23:06:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:a167b4d79cce5b5ea6c571a819831b5c04d38ba2d15c8323d46cfb6974be7812","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":31,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":31,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":31,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":31,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T13:35:49.779331Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"pith","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":4,"observed_at":"2026-08-05T02:28:24.338817Z","source":"pith"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":"2309.00236","doi":"10.48550/arxiv.2309.00236","metadata_source":"pith","pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Image hijacks: Adversarial images can control generative models at runtime","venue":"cs.LG","work_id":"a629c7a2-b381-4af9-97e3-fcc9a6e8de84","year":2023},"citing_paper":{"arxiv_id":"2402.10260","last_updated":"2024-08-27T03:32:47Z","snapshot_observed_at":"2026-08-04T21:32:35.483431Z","submitted_at":"2024-02-15T18:58:09Z","title":"A StrongREJECT for Empty Jailbreaks","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-16T21:28:02.745230Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2402.10260"},"observation_digest":"sha256:05937f01431416cbf961d8039ffcea4fe36d26a945ac06abac5f39bf17c1089f","observation_id":"02321d28-3888-4a5c-8712-d3a9c6079e51","resolution":{"observed_at":"2026-05-16T21:28:02.778509Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":"2309.00236","doi":"10.48550/arxiv.2309.00236","metadata_source":"pith","pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Image hijacks: Adversarial images can control generative models at runtime","venue":"cs.LG","work_id":"a629c7a2-b381-4af9-97e3-fcc9a6e8de84","year":2023},"citing_paper":{"arxiv_id":"2408.12935","last_updated":"2026-05-13T07:56:42Z","snapshot_observed_at":"2026-08-02T12:48:59.218457Z","submitted_at":"2024-08-23T09:33:48Z","title":"AI Safety Landscape for Large Language Models: Taxonomy, State-of-the-art, and Future Directions","version":4},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-23T21:54:26.670284Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2408.12935"},"observation_digest":"sha256:2008f3b08ce969d3d158090474c26b7d133b2193b6af112a428ba0026d9ddc55","observation_id":"774c8317-bc82-4074-87ff-188c9f1bb67d","resolution":{"observed_at":"2026-05-23T21:55:50.328454Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":"2309.00236","doi":"10.48550/arxiv.2309.00236","metadata_source":"pith","pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Image hijacks: Adversarial images can control generative models at runtime","venue":"cs.LG","work_id":"a629c7a2-b381-4af9-97e3-fcc9a6e8de84","year":2023},"citing_paper":{"arxiv_id":"2411.18275","last_updated":"2026-04-21T10:31:24Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-11-27T12:09:43Z","title":"Visual Adversarial Attack on Vision-Language Models for Autonomous Driving","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-23T16:35:24.063578Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2411.18275"},"observation_digest":"sha256:51a5688136b8d2e05e143a8b8a6ca89214723f56fc4318e5649e6f444979bf25","observation_id":"5685b14d-88f9-4990-9c1f-fec7f000d2fe","resolution":{"observed_at":"2026-05-23T16:35:42.148847Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":"2309.00236","doi":"10.48550/arxiv.2309.00236","metadata_source":"pith","pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Image hijacks: Adversarial images can control generative models at runtime","venue":"cs.LG","work_id":"a629c7a2-b381-4af9-97e3-fcc9a6e8de84","year":2023},"citing_paper":{"arxiv_id":"2502.05206","last_updated":"2026-04-14T16:10:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-02T05:14:22Z","title":"Safety at Scale: A Comprehensive Survey of Large Model and Agent Safety","version":6},"reference_index":274,"source":"pdf_text","source_observed_at":"2026-05-23T04:39:04.591722Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2502.05206"},"observation_digest":"sha256:de6a37e40bc712044864aa00cfc66a238e96a9408102ced5faea31c8f6948179","observation_id":"461e3e73-78d4-43f1-8b51-fcf858ff2ac0","resolution":{"observed_at":"2026-05-23T04:42:34.140208Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":"2309.00236","doi":"10.48550/arxiv.2309.00236","metadata_source":"pith","pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Image hijacks: Adversarial images can control generative models at runtime","venue":"cs.LG","work_id":"a629c7a2-b381-4af9-97e3-fcc9a6e8de84","year":2023},"citing_paper":{"arxiv_id":"2503.06223","last_updated":"2026-08-06T06:47:13Z","snapshot_observed_at":"2026-08-08T22:16:16.417417Z","submitted_at":"2025-03-08T13:51:40Z","title":"RedDiffuser: Auditing Multimodal Safety Failures in Vision-Language Models via Reinforced Diffusion","version":5},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-23T00:13:08.603115Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2503.06223"},"observation_digest":"sha256:30d8746b069ab9abdc057e54215519414c16f288775b3fb79a24f2a1bb03a4a5","observation_id":"3e321515-ee4d-4d33-abcc-a89f409c1336","resolution":{"observed_at":"2026-05-23T00:15:14.813903Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-07T13:35:49.779331Z","title":"Image hijacks: Adversarial images can control generative models at runtime.arXiv preprint arXiv:2309.00236, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.21494","last_updated":"2025-05-27T17:56:57Z","snapshot_observed_at":"2026-08-07T21:17:47.870634Z","submitted_at":"2025-05-27T17:56:57Z","title":"Adversarial Attacks against Closed-Source MLLMs via Feature Optimal Alignment","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T13:35:49.779331Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2505.21494"},"observation_digest":"sha256:901ba01f9cea27b69f0fd4c35af8d603d5a2139cad6bf7887c764afca7cfded5","observation_id":"4039150c-a3ae-444f-a8b0-24972fc7bc92","resolution":{"observed_at":"2026-08-07T13:35:49.779331Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-07T13:32:45.612634Z","title":"Image hijacks: Adversarial images can control generative models at runtime.arXiv preprint arXiv:2309.00236, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.21499","last_updated":"2025-05-27T17:59:05Z","snapshot_observed_at":"2026-08-07T13:24:27.400642Z","submitted_at":"2025-05-27T17:59:05Z","title":"AdInject: Real-World Black-Box Attacks on Web Agents via Advertising Delivery","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T13:32:45.612634Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2505.21499"},"observation_digest":"sha256:d91c3365a4c34c1c110ebcb987b52ef0514389d10cfe520ccdda2b56af21ab7d","observation_id":"f2c31fbc-821e-42fe-bdd7-19e4ef8a4a10","resolution":{"observed_at":"2026-08-07T13:32:45.612634Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-07T12:07:58.302229Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.00548","last_updated":"2025-05-31T13:11:14Z","snapshot_observed_at":"2026-08-08T10:05:29.642578Z","submitted_at":"2025-05-31T13:11:14Z","title":"Con Instruction: Universal Jailbreaking of Multimodal Large Language Models via Non-Textual Modalities","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-07T12:07:58.302229Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2506.00548"},"observation_digest":"sha256:6d58eb9860f269853f18d41deeacd9a50df9a41cf88704138f394fc28200f268","observation_id":"2b5915c6-681e-41a8-81d0-73865e04c1f5","resolution":{"observed_at":"2026-08-07T12:07:58.302229Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-06T20:45:53.240015Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.02057","last_updated":"2025-07-02T18:00:49Z","snapshot_observed_at":"2026-08-06T20:36:51.169138Z","submitted_at":"2025-07-02T18:00:49Z","title":"MGC: A Compiler Framework Exploiting Compositional Blindness in Aligned LLMs for Malware Generation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T20:45:53.240015Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2507.02057"},"observation_digest":"sha256:0def9dce94a90a8f14e9175142ac4b3093fa5254f32512682efd92895516a733","observation_id":"9fefb28a-1b63-4374-aac9-ccaebc44501a","resolution":{"observed_at":"2026-08-06T20:45:53.240015Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-06T18:40:52.561526Z","title":"Image hijacks: Adversarial images can control generative models at runtime","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.07709","last_updated":"2025-07-10T12:40:34Z","snapshot_observed_at":"2026-08-08T00:07:42.743533Z","submitted_at":"2025-07-10T12:40:34Z","title":"One Object, Multiple Lies: A Benchmark for Cross-task Adversarial Attack on Unified Vision-Language Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T18:40:52.561526Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2507.07709"},"observation_digest":"sha256:95c1ee9a2677dc5e04f3e07e1418280d04417c97457926f4cf84bdd93692c8f3","observation_id":"2f8da359-dda7-4ee8-beac-ffae3b37f341","resolution":{"observed_at":"2026-08-06T18:40:52.561526Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-06T17:35:47.822419Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.14202","last_updated":"2025-07-14T17:41:12Z","snapshot_observed_at":"2026-08-08T03:22:49.699348Z","submitted_at":"2025-07-14T17:41:12Z","title":"PRM-Free Security Alignment of Large Models via Red Teaming and Adversarial Training","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-06T17:35:47.822419Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2507.14202"},"observation_digest":"sha256:d1eebf3e624dd64777d9bbc88c8bd9314481701c22d9cd5b8ed48655e5a2ff30","observation_id":"517e308b-7e38-4685-85ce-e9f649f6d4c3","resolution":{"observed_at":"2026-08-06T17:35:47.822419Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-06T12:09:39.620116Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.22037","last_updated":"2025-07-29T17:39:48Z","snapshot_observed_at":"2026-08-06T15:54:16.679483Z","submitted_at":"2025-07-29T17:39:48Z","title":"Secure Tug-of-War (SecTOW): Iterative Defense-Attack Training with Reinforcement Learning for Multimodal Model Security","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-06T12:09:39.620116Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2507.22037"},"observation_digest":"sha256:5e91f4905a583c793a9af496d3851fcdd8057bb2cb81a0c0cb468ac0d9424cad","observation_id":"cf046c21-fd53-4e9d-b1c2-edb0f1fd98ce","resolution":{"observed_at":"2026-08-06T12:09:39.620116Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-06T11:02:14.914452Z","title":"Image hijacks: Adversarial images can control generative models at runtime","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.23202","last_updated":"2025-07-31T02:57:20Z","snapshot_observed_at":"2026-08-06T11:02:14.318007Z","submitted_at":"2025-07-31T02:57:20Z","title":"Adversarial-Guided Diffusion for Multimodal LLM Attacks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T11:02:14.914452Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2507.23202"},"observation_digest":"sha256:de7879b0003ab8c58dfa95eb68f7707ffb63b883b59c07bb3b643892366bacad","observation_id":"355b679a-62d3-4fc7-9471-be2b086b490b","resolution":{"observed_at":"2026-08-06T11:02:14.914452Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-05T20:29:05.290017Z","title":"Bailey et al","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.10955","last_updated":"2025-08-14T07:25:45Z","snapshot_observed_at":"2026-08-07T18:23:08.889281Z","submitted_at":"2025-08-14T07:25:45Z","title":"Empowering Multimodal LLMs with External Tools: A Comprehensive Survey","version":1},"reference_index":221,"source":"arxiv_source","source_observed_at":"2026-08-05T20:29:05.290017Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2508.10955"},"observation_digest":"sha256:de4a182e8b00583a3d1e5d95a4443ebcf3297f08250904396c1d4197ae5b9591","observation_id":"728cd3cb-46c5-4121-86d0-75811683e759","resolution":{"observed_at":"2026-08-05T20:29:05.290017Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-05T16:00:48.260226Z","title":"Image hijacks: Adversarial images can control generative models at runtime, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.19445","last_updated":"2026-06-16T17:34:06Z","snapshot_observed_at":"2026-08-08T05:25:02.825611Z","submitted_at":"2025-08-26T21:36:45Z","title":"On Surjectivity of Neural Networks: Can you elicit any behavior from your model?","version":3},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-05T16:00:48.260226Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2508.19445"},"observation_digest":"sha256:c00b23ecf2f95f423da363a5bd99b9c1e2fdb971d0733b63b5cbfb44f3ded386","observation_id":"359f7fbe-c741-402f-9da7-57fcf4bed3f8","resolution":{"observed_at":"2026-08-05T16:00:48.260226Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-04T13:45:26.101151Z","title":"Image hijacks: Adversarial images can control generative models at runtime.arXiv preprint arXiv:2309.00236,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.25533","last_updated":"2026-07-06T05:00:34Z","snapshot_observed_at":"2026-08-06T23:26:32.833872Z","submitted_at":"2025-09-29T21:43:18Z","title":"VISOR++: Universal Visual Inputs based Steering for Large Vision Language Models","version":2},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-04T13:45:26.101151Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2509.25533"},"observation_digest":"sha256:8ef441ffdf38832ff949451712d0529b30cf260de859a8a8f94e145214643a79","observation_id":"c82158bb-6354-4108-8dac-4d49dca84707","resolution":{"observed_at":"2026-08-04T13:45:26.101151Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-03T21:04:37.726826Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2511.17673","last_updated":"2026-07-01T04:49:42Z","snapshot_observed_at":"2026-08-08T22:47:36.110824Z","submitted_at":"2025-11-21T05:19:34Z","title":"Bridging Symbolic Control and Neural Reasoning in LLM Agents -- The Structured Cognitive Loop","version":6},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-03T21:04:37.726826Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2511.17673"},"observation_digest":"sha256:ed385fd3ecb119557b5d00df88d316a5f20d8d17d0964197c4bf38192497a27c","observation_id":"bdc042fa-3441-4b1f-b3e8-9a641a28b43e","resolution":{"observed_at":"2026-08-03T21:04:37.726826Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-03T20:27:03.808043Z","title":"Image hi- jacks: Adversarial images can control generative models at runtime.arXiv preprint arXiv:2309.00236,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2511.20002","last_updated":"2026-06-17T05:14:08Z","snapshot_observed_at":"2026-08-03T20:27:02.365537Z","submitted_at":"2025-11-25T07:13:13Z","title":"Semantic Router: On the Feasibility of Hijacking MLLMs via a Single Adversarial Perturbation","version":3},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-03T20:27:03.808043Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2511.20002"},"observation_digest":"sha256:7d2e694de6adc82ef7ffee516df8b1064000faf324574cadd2d7686c23e8803d","observation_id":"d60046bd-6ccb-49f0-90f8-a6c2f08e2217","resolution":{"observed_at":"2026-08-03T20:27:03.808043Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":"2309.00236","doi":"10.48550/arxiv.2309.00236","metadata_source":"pith","pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Image hijacks: Adversarial images can control generative models at runtime","venue":"cs.LG","work_id":"a629c7a2-b381-4af9-97e3-fcc9a6e8de84","year":2023},"citing_paper":{"arxiv_id":"2604.13803","last_updated":"2026-04-15T12:38:51Z","snapshot_observed_at":"2026-07-06T23:01:41.643335Z","submitted_at":"2026-04-15T12:38:51Z","title":"Gaslight, Gatekeep, V1-V3: Early Visual Cortex Alignment Shields Vision-Language Models from Sycophantic Manipulation","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-05-10T13:09:35.407790Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2604.13803"},"observation_digest":"sha256:4bdeb4f49bb771a1fa2a89ae0bffbb7cc6cd4cac519f754b52d8c43c5105c097","observation_id":"642cc3bb-29dd-44b4-8536-6692169c79e8","resolution":{"observed_at":"2026-05-10T13:10:26.112009Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":"2309.00236","doi":"10.48550/arxiv.2309.00236","metadata_source":"pith","pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Image hijacks: Adversarial images can control generative models at runtime","venue":"cs.LG","work_id":"a629c7a2-b381-4af9-97e3-fcc9a6e8de84","year":2023},"citing_paper":{"arxiv_id":"2605.01449","last_updated":"2026-05-02T13:56:50Z","snapshot_observed_at":"2026-08-03T12:34:05.607551Z","submitted_at":"2026-05-02T13:56:50Z","title":"VisInject: Disruption != Injection -- A Dual-Dimension Evaluation of Universal Adversarial Attacks on Vision-Language Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-09T14:24:48.999632Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2605.01449"},"observation_digest":"sha256:620d9a7f8d4822d0674a8339fc062d8257fb02e7ca1b68c6ade12bbee3f554b6","observation_id":"7894a867-930c-433e-a2f5-6202fe646a6f","resolution":{"observed_at":"2026-05-11T16:56:07.993342Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":"2309.00236","doi":"10.48550/arxiv.2309.00236","metadata_source":"pith","pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Image hijacks: Adversarial images can control generative models at runtime","venue":"cs.LG","work_id":"a629c7a2-b381-4af9-97e3-fcc9a6e8de84","year":2023},"citing_paper":{"arxiv_id":"2605.01758","last_updated":"2026-05-14T12:12:16Z","snapshot_observed_at":"2026-07-06T23:14:57.459903Z","submitted_at":"2026-05-03T07:38:42Z","title":"Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-15T07:11:16.568353Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2605.01758"},"observation_digest":"sha256:a2d0eccc81ff744bff6e0fbc693133ecb9bf55fc22ef16036eb199225bb75682","observation_id":"554af555-e98d-4093-810f-582aa7cb93a2","resolution":{"observed_at":"2026-05-15T07:15:11.986933Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":"2309.00236","doi":"10.48550/arxiv.2309.00236","metadata_source":"pith","pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Image hijacks: Adversarial images can control generative models at runtime","venue":"cs.LG","work_id":"a629c7a2-b381-4af9-97e3-fcc9a6e8de84","year":2023},"citing_paper":{"arxiv_id":"2605.04261","last_updated":"2026-05-05T19:55:28Z","snapshot_observed_at":"2026-07-06T23:17:04.200299Z","submitted_at":"2026-05-05T19:55:28Z","title":"Laundering AI Authority with Adversarial Examples","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-08T17:19:38.662062Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2605.04261"},"observation_digest":"sha256:83a7da3c2ef96b6938b979bbc4aa49de9f0235d98a128c03feddca0cc2cec585","observation_id":"e08a0691-f426-46c8-b89a-8801f0209f1e","resolution":{"observed_at":"2026-05-11T17:41:08.090263Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":"2309.00236","doi":"10.48550/arxiv.2309.00236","metadata_source":"pith","pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Image hijacks: Adversarial images can control generative models at runtime","venue":"cs.LG","work_id":"a629c7a2-b381-4af9-97e3-fcc9a6e8de84","year":2023},"citing_paper":{"arxiv_id":"2605.10582","last_updated":"2026-05-11T13:54:26Z","snapshot_observed_at":"2026-08-06T09:00:38.839501Z","submitted_at":"2026-05-11T13:54:26Z","title":"Guaranteed Jailbreaking Defense via Disrupt-and-Rectify Smoothing","version":1},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-05-12T04:50:08.866969Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2605.10582"},"observation_digest":"sha256:bbf5b5ee2c548624e89c42bdb019487f9b38c4726b83d20c4fee841ed1d4d988","observation_id":"b913bc95-d0d5-4d3f-a995-6548ac2acf4b","resolution":{"observed_at":"2026-05-12T05:51:27.536708Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":"2309.00236","doi":"10.48550/arxiv.2309.00236","metadata_source":"pith","pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Image hijacks: Adversarial images can control generative models at runtime","venue":"cs.LG","work_id":"a629c7a2-b381-4af9-97e3-fcc9a6e8de84","year":2023},"citing_paper":{"arxiv_id":"2605.18988","last_updated":"2026-05-18T18:06:20Z","snapshot_observed_at":"2026-07-06T23:29:47.081347Z","submitted_at":"2026-05-18T18:06:20Z","title":"Surviving the Unseen: Predictive Defense for Novel Multi-Turn Multimodal Attacks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-20T09:07:47.278074Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2605.18988"},"observation_digest":"sha256:f081573bd9a16bde47590d4dec6fc9107ec0ce23fb709b6363691eb9eda8ead8","observation_id":"9e03c10e-ad26-4b82-a41d-117a4ef72908","resolution":{"observed_at":"2026-05-20T09:08:09.459878Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":"2309.00236","doi":"10.48550/arxiv.2309.00236","metadata_source":"pith","pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Image hijacks: Adversarial images can control generative models at runtime","venue":"cs.LG","work_id":"a629c7a2-b381-4af9-97e3-fcc9a6e8de84","year":2023},"citing_paper":{"arxiv_id":"2606.01837","last_updated":"2026-06-01T07:49:12Z","snapshot_observed_at":"2026-07-06T23:42:21.252086Z","submitted_at":"2026-06-01T07:49:12Z","title":"Benign Inputs, Harmful Outputs: Cross-Modal Jailbreaking via Distributed Semantic Recomposition","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-28T14:17:52.902183Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2606.01837"},"observation_digest":"sha256:c94436825ecfe042a2bd6621f33805e12e0feb1d225f879d0ad6d2999767acad","observation_id":"f8e1ebab-a606-4108-8d4d-ed56415f6c81","resolution":{"observed_at":"2026-07-01T23:26:23.291566Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":"2309.00236","doi":"10.48550/arxiv.2309.00236","metadata_source":"pith","pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Image hijacks: Adversarial images can control generative models at runtime","venue":"cs.LG","work_id":"a629c7a2-b381-4af9-97e3-fcc9a6e8de84","year":2023},"citing_paper":{"arxiv_id":"2606.03793","last_updated":"2026-06-02T15:42:10Z","snapshot_observed_at":"2026-08-05T09:22:21.521124Z","submitted_at":"2026-06-02T15:42:10Z","title":"Exploring Adversarial Robustness and Safety Alignment in Multilingual Multi-Modal Large Language Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-28T10:10:38.261635Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2606.03793"},"observation_digest":"sha256:6326f375a528073c7555c34d72388ee849714940c39de24a8856701106552c95","observation_id":"66954ccd-3081-4be4-b8f8-bd09cfc67b1d","resolution":{"observed_at":"2026-07-02T03:16:34.797053Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":"2309.00236","doi":"10.48550/arxiv.2309.00236","metadata_source":"pith","pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Image hijacks: Adversarial images can control generative models at runtime","venue":"cs.LG","work_id":"a629c7a2-b381-4af9-97e3-fcc9a6e8de84","year":2023},"citing_paper":{"arxiv_id":"2606.07595","last_updated":"2026-05-29T05:17:03Z","snapshot_observed_at":"2026-08-03T21:14:55.280239Z","submitted_at":"2026-05-29T05:17:03Z","title":"VisualLeakBench: Reproducible Action-Boundary Propagation Failures in Vision-Language Agents","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-06-28T22:59:43.041678Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2606.07595"},"observation_digest":"sha256:a0127ca14d49aebf033db294f156e91bec6bb4e770a1a7e6bfd7cd26fc388482","observation_id":"d1e7e3a0-313f-4c4d-8452-1045bc2cdcb2","resolution":{"observed_at":"2026-06-28T23:02:46.373139Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":"2309.00236","doi":"10.48550/arxiv.2309.00236","metadata_source":"pith","pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Image hijacks: Adversarial images can control generative models at runtime","venue":"cs.LG","work_id":"a629c7a2-b381-4af9-97e3-fcc9a6e8de84","year":2023},"citing_paper":{"arxiv_id":"2606.11854","last_updated":"2026-06-10T09:30:37Z","snapshot_observed_at":"2026-08-01T08:16:13.928240Z","submitted_at":"2026-06-10T09:30:37Z","title":"Fine-tuning Multi-modal LLMs with ART: Art-based Reinforcement Training","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-27T10:30:51.490047Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2606.11854"},"observation_digest":"sha256:001638672ed110e62486565f0a811eb478b2c18c62562a27406c09d214629274","observation_id":"5a665c2a-4ae5-43bc-b903-1f388e7cd76d","resolution":{"observed_at":"2026-07-03T09:07:48.147077Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":"2309.00236","doi":"10.48550/arxiv.2309.00236","metadata_source":"pith","pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Image hijacks: Adversarial images can control generative models at runtime","venue":"cs.LG","work_id":"a629c7a2-b381-4af9-97e3-fcc9a6e8de84","year":2023},"citing_paper":{"arxiv_id":"2606.20717","last_updated":"2026-06-16T15:31:33Z","snapshot_observed_at":"2026-08-03T03:41:11.931921Z","submitted_at":"2026-06-16T15:31:33Z","title":"MIRAGE: Stealthy Visual Prompt Injection for Vulnerability Detection in Web Agents","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-06-27T00:54:00.944706Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2606.20717"},"observation_digest":"sha256:2fd280a73101f827db6c3b3ad6fda3f38ed528ae2b33c298bbff269b88e0b27c","observation_id":"31f82be9-7a6e-4e6d-a307-80e3e09d17de","resolution":{"observed_at":"2026-07-03T21:08:58.363185Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":"2309.00236","doi":"10.48550/arxiv.2309.00236","metadata_source":"pith","pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Image hijacks: Adversarial images can control generative models at runtime","venue":"cs.LG","work_id":"a629c7a2-b381-4af9-97e3-fcc9a6e8de84","year":2023},"citing_paper":{"arxiv_id":"2607.07375","last_updated":"2026-07-08T13:06:20Z","snapshot_observed_at":"2026-08-03T20:22:35.302558Z","submitted_at":"2026-07-08T13:06:20Z","title":"On Adversarial Vulnerability of Vision-Language Models through the Lens of Intermediate Spectral Subspaces","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-09T12:55:34.631248Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2607.07375"},"observation_digest":"sha256:3f061cbfdfb399ea29288060b81201d170e2de63f5e9e6a68df9434721c96523","observation_id":"cf292219-7594-4d33-bc45-85751b4b59c9","resolution":{"observed_at":"2026-07-09T12:56:14.860115Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.00236","snapshot_observed_at":"2026-08-07T00:14:47.254551Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04034","last_updated":"2026-08-03T02:28:52Z","snapshot_observed_at":"2026-08-08T22:11:09.253195Z","submitted_at":"2026-08-03T02:28:52Z","title":"A Multimodal Automatic Redteaming Evaluation based on Atomic Jailbreak Strategy Decoupling and Combination","version":1},"reference_index":116,"source":"arxiv_source","source_observed_at":"2026-08-07T00:14:47.254551Z"},"links":{"cited_paper":"/paper/2309.00236","citing_paper":"/paper/2608.04034"},"observation_digest":"sha256:fd9db481d566d1376e339f80f33c938fc46e06bc084ab726582af656cff66d81","observation_id":"28af3106-d41f-413d-b3f1-54babc562468","resolution":{"observed_at":"2026-08-07T00:14:47.254551Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2309.00236/citation-record","integrity":"/paper/2309.00236/integrity","json":"/paper/2309.00236/citation-record.json","paper":"/paper/2309.00236"},"outbound":[],"paper":{"arxiv_id":"2309.00236","last_updated":"2024-09-17T19:56:09Z","latest_version":4,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-06T06:17:45.496933Z","submitted_at":"2023-09-01T03:53:40Z","title":"Image Hijacks: Adversarial Images can Control Generative Models at Runtime"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 31 inbound Pith citation observations for arXiv:2309.00236."}