Pith. sign in

Paper Citation Record · LEDGER

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs

As of 3 August 2026, this Paper Citation Record lists 63 of 63 outbound references and 1 inbound Pith citation observation for arXiv:2604.12616.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2604.12616 v1

Coverage vector

measured 63 of 63 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-05-10T15:06:43.140580Z

measured 64 of 64 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-03T06:30:56.289259+00:00

measured 1 of 1 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-02T02:44:13.644542Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

63 of 63 outbound references displayed

  • verified exact29
  • verified fuzzy1
  • unresolved28
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch5

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation d9fc1dd2-a021-4347-ba30-6b9a704aa26d · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 1

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.598497Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:f461f32585b8fd78d4ce7f78c67de8bbb48c09014f48b03e5b709ff3be405f81

Observation 0417bc13-3a5f-49d6-9929-c07f9d15aec8 · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 2

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.601467Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:52bee9fd3688efab57dbd875c12dd8d54d5f754d138a3bc5f027dc47d1280fc1

Observation 3f804cb1-ce7c-414f-99f6-24d65acefc11 · outbound

This paper cites 2025 IEEE Conference on Secure and Trustworthy Machine Learning (SaTML) , year =.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs 2025 IEEE Conference on Secure and Trustworthy Machine Learning (SaTML) , year =

Reference 3

Resolution
metadata mismatch
arxiv_id, observed 2026-05-10T15:10:31.499253Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:73d37cea7c461d114124a1dd3bce9a14cfac5ab3228f0ea81f6a6cde0e3fd460

Observation 6322f05b-9528-4d03-a836-a22fd748ee24 · outbound

This paper cites Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLP.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Why Should Adversarial Perturbations be Imperceptible? Rethink the Research Paradigm in Adversarial NLP

Reference 4

Resolution
verified exact
doi, observed 2026-05-10T15:10:31.494709Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:6302b3b2b40ef149a86549a1bbb08b23095ba2ff6720df1f5c22a2617b45ca51

Observation 22702ab2-e43c-4599-bc3e-d96b2b602d23 · outbound

This paper cites AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases

Reference 5

Resolution
verified exact
arxiv_id, observed 2026-05-11T11:11:05.393842Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:7f20225ed5458a806e9f18efbafb84eb6945ddb8e075bbf02952318747f35c2a

Observation 86133c2f-bdc7-43ce-8f57-fa6e2d89ecbf · outbound

This paper cites Safe + Safe = Unsafe? Exploring How Safe Images Can Be Exploited to Jailbreak Large Vision-Language Models.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Safe + Safe = Unsafe? Exploring How Safe Images Can Be Exploited to Jailbreak Large Vision-Language Models

Reference 6

Resolution
verified exact
arxiv_id, observed 2026-05-11T11:11:05.382509Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:45988a2df37b506b9aacf151748415c42e2c21362794e69d87dd4eb9586d04a6

Observation 385ef909-07e9-4842-b8a9-50f2d593d6c1 · outbound

This paper cites DeepSeek-V3.2: Pushing the Frontier of Open Large Language Models.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs DeepSeek-V3.2: Pushing the Frontier of Open Large Language Models

Reference 7

Resolution
verified exact
local_arxiv, observed 2026-05-11T11:11:05.356850Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:4a54984d7d4b5794d6dde841ded9b2a4d9b9a8a14503de2bb7626759e5d4148c

Observation ee2f2bb6-2f70-46f2-acb6-0075cde24b6d · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 8

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.593184Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:89b920dee055b225c4fe7528dfb103c40d9761eb85d62fc4e11d65ed8333002e

Observation 2fbfbdb7-3bf4-4da1-9342-5934c18c20ff · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 9

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.580302Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:a9d3bc9384ecd0e4d6b641915c709d5e7e76b30546589bd7ce4dcd3249a6f209

Observation c6348f86-cafe-4cd9-9d37-8af063015e45 · outbound

This paper cites Qwen3-VL Technical Report.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Qwen3-VL Technical Report

Reference 10

Resolution
verified exact
local_arxiv, observed 2026-05-11T11:11:05.716356Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:9f5491b28878b324a1eb378b9b95f8e1bf7b6da55537a60a714c8a2e0a163cda

Observation e0900156-f996-4636-b475-b5bdc32e9b9c · outbound

This paper cites Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast

Reference 11

Resolution
verified exact
arxiv_id, observed 2026-05-11T11:11:05.672343Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:bed03704c1349672588c57ec9bc73c08b17383ec51f55e083be23e142fe8d4aa

Observation 9baf8ce6-e296-48d0-9078-4b3900b9261c · outbound

This paper cites EvoPrompt: Connecting LLMs with Evolutionary Algorithms Yields Powerful Prompt Optimizers.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs EvoPrompt: Connecting LLMs with Evolutionary Algorithms Yields Powerful Prompt Optimizers

Reference 12

Resolution
verified exact
arxiv_id, observed 2026-05-16T06:11:49.925109Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:432e9e95d9692fa7443901d6b595987510ce9c72f9216e70aaf0f9f7cc8d75d2

Observation eac0e59c-228f-4e21-abf1-8fdfe685d1b1 · outbound

This paper cites Tree-based dialogue reinforced policy optimization for red-teaming attacks.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Tree-based dialogue reinforced policy optimization for red-teaming attacks

Reference 13

Resolution
verified exact
arxiv_id, observed 2026-05-11T11:11:05.511358Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:94fa237219c158be0a544ddd064f03e95cbe5bef0cf6f8b1d2bda204f7def2d9

Observation 33231b45-32de-4982-8e26-6d79e350a989 · outbound

This paper cites HippoRAG: Neurobiologically Inspired Long-Term Memory for Large Language Models.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs HippoRAG: Neurobiologically Inspired Long-Term Memory for Large Language Models

Reference 14

Resolution
verified exact
arxiv_id, observed 2026-05-11T11:11:05.735684Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:d6bb7fb0ba3874bcc5d6cbe1025bd89077a04c72b3fa60a2693775634c9c483e

Observation e5d807d1-8bf1-489e-8f1e-0785aca47fd6 · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 15

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.566857Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:4d7a9c2806093d291f08d19be35e4e6ec74888fee6b6408747ea3702acaab18d

Observation 98cbaeb7-5cfd-41a3-b9a4-7c001bc5dc6f · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 16

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.633447Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:6a1e9b01910bfc2351b13590224222cb9504865e932371076ddd44d901535eb4

Observation 993483cd-befb-4489-b115-789523ec2f63 · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 17

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.624897Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:d0b791f7995a2169cbe4e33740a910263afa7fb789505e1b70e882f52c6b1a2c

Observation ed3b49ce-82c1-480d-a71f-4e369f40361b · outbound

This paper cites Qwen3-VL-Embedding and Qwen3-VL-Reranker: A Unified Framework for State-of-the-Art Multimodal Retrieval and Ranking.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Qwen3-VL-Embedding and Qwen3-VL-Reranker: A Unified Framework for State-of-the-Art Multimodal Retrieval and Ranking

Reference 18

Resolution
verified exact
arxiv_id, observed 2026-05-12T09:36:21.368649Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:8d2d87fff75122c018483ba7bbe05f905b509b1d67cfbb858197974df1eb3866

Observation 207b53f4-7f38-4914-8dfa-86118fc878cf · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 19

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.577700Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:987cafc4887225f8131efc04e98baa5b432bdbc099feb189036d8ff929de65cc

Observation 3b14ce19-a91c-488d-aefd-838dec9c6758 · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 20

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.563775Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:fd42b36a68abf93315ad7c8fcee3c9c7bd06202cd813a82da9f63945892113c1

Observation 6f7dac83-8c85-49e1-9fa7-c61a78ea7039 · outbound

This paper cites Lawrence Zitnick.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Lawrence Zitnick

Reference 21

Resolution
verified fuzzy
raw_fallback, observed 2026-05-18T08:02:31.588051Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:1a5231b376f28891d59ddc90893cea5775f9efd47668c0919cb7db338cfa2cdb

Observation caa7e3ad-c817-49dc-ac0c-e10fbdb1009b · outbound

This paper cites Improved Baselines with Visual Instruction Tuning.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Improved Baselines with Visual Instruction Tuning

Reference 22

Resolution
verified exact
arxiv_id, observed 2026-05-12T19:11:34.143871Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:0bedb91dcc82fd5fdb64a81729148a3a60291d920d6c88e1f3d5b1353835fdc2

Observation 69cd6318-8040-4648-aa31-5da6a783bd4f · outbound

This paper cites AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs AutoDAN-Turbo: A Lifelong Agent for Strategy Self-Exploration to Jailbreak LLMs

Reference 23

Resolution
metadata mismatch
arxiv_id, observed 2026-05-11T11:11:05.526422Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:6cc6bd74248cc56970662b43b15f88d9a61c388fe9a0fd059aeb7df4813886c6

Observation 3d294c83-fe80-44f9-a00a-c72a1cd9c73d · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 24

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.569630Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:63fa58885ca3ad4777c47793e07d980b5f7094f5395d2ce176225027c7a1f8b7

Observation ee0ff9d1-3e8c-4ce3-a64b-9a31ea9420a1 · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 25

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.595684Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:015559153eccf2a045777a8c550359690927843cf419189c675932f616db0365

Observation e79cba21-01f1-4557-b032-b0dda5d71dcd · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 26

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.557799Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:54da73962ce54bfe0147dbb1f95af04b25e3c434b67da174a57aecb1018ea258

Observation 5d35ea30-6ea0-438b-848c-7c2399bc7671 · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 27

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.560784Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:c1f2f3ed22d2923b95f51ecee4f35a819ef2405e7feb5df4a579d946cc7a3081

Observation ca267615-9cb7-418f-8dee-d30f043a325c · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 28

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.590581Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:bee1b8ea72784f74615533007fc610c1e0034e651e841b548f512fcebff75f0f

Observation bd104802-2d95-4646-9556-eb8b155fc22c · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 29

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.572253Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:8e9852eafebd4ec5992ec2473a8ce1ee2d44029aea9bea7f2a62b7fc59aa1411

Observation 1cb5aea9-9360-4888-ab71-93933af2fed7 · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 30

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.574856Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:9969fc14e8c8232cbe32887d261dbb3d4f559e5700875bfdd6db9c44fbaf5326

Observation 02e0652a-f8f8-45c8-8671-15c73833a8c9 · outbound

This paper cites Advances in Neural Information Processing Systems , volume =.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Advances in Neural Information Processing Systems , volume =

Reference 31

Resolution
verified exact
doi, observed 2026-05-10T15:10:31.500912Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:6eec04887a1f9148e638951764ab2198942c1a01719fdcdde92c861344bf53b9

Observation 75049536-ebbe-4c1e-a2a6-12e80a9ab438 · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 32

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.582811Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:ac473522612141db21863cd992daf26d418212c9e188629b9e1ce1f7baba3314

Observation 196a48cc-5a81-485c-9833-f95b313cdbac · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 33

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.622186Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:ef4ffa055f4011fc6c3b3b6aa0dda5b6257e7d92d551cb2d30c2d81ce18dacfa

Observation f6727b7a-bc53-41e2-ac0f-10da53980a4e · outbound

This paper cites Jailbreaking Attack against Multimodal Large Language Model.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Jailbreaking Attack against Multimodal Large Language Model

Reference 34

Resolution
verified exact
arxiv_id, observed 2026-05-11T11:11:05.554349Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:2f2b848500e07e99e1b86b5fbcd2c3faf1e08a03c08c66baca9cd6b00eecb098

Observation 15064cfd-c91d-46a9-9bed-2246a1dea3af · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 35

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.627723Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:1124369dd4402b2f9264cffc5c7e40e4b106e777d255c7e4497072e1e2f7d1fc

Observation 6cb2bc32-ee57-4175-b821-7ceedacdaf32 · outbound

This paper cites Proceedings of the 2022 Conference on Empirical Methods in Natural Language Processing , year =.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Proceedings of the 2022 Conference on Empirical Methods in Natural Language Processing , year =

Reference 36

Resolution
verified exact
doi, observed 2026-05-10T15:10:31.502738Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:8d83ac66166abf75d3a7cb1dfb22cf32f7d6968c7d2fed74ab68ea9baa460be3

Observation fcac2ebc-428f-4de1-87f5-62da0b4e464e · outbound

This paper cites In: Wooldridge, M.J., Dy, J.G., Natarajan, S.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs In: Wooldridge, M.J., Dy, J.G., Natarajan, S

Reference 37

Resolution
verified exact
doi, observed 2026-05-10T15:10:31.496597Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:a47a8e30d2a9981cd0ac76b642e4577b8bb566c71db41db049a64533be422d80

Observation fa016be3-4ba5-46e9-afb5-eb87272e954a · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 38

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.630508Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:f65d314a2a067be016fd786d7808a8547abd1a23a77c505e8e70d36a35a4a739

Observation 45bf207a-4f02-407e-87b0-5791b19c1a0f · outbound

This paper cites Null It Out: Guarding Protected Attributes by Iterative Nullspace Projection.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Null It Out: Guarding Protected Attributes by Iterative Nullspace Projection

Reference 39

Resolution
metadata mismatch
doi, observed 2026-05-10T15:10:31.504594Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:16f284c8f3f8e58efd63375fa9ee2ec84fbeca6fae486b2cd5c5dc26b9b5918f

Observation cc6911e2-b2d2-47ad-896f-9bb84ea34336 · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 40

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.613414Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:4ae4e83384034a590cb6a71ebcd6df05cfc4267b38ac5471f7d1dea218d64196

Observation 257459ce-a4f2-4657-aef1-1d72628f4542 · outbound

This paper cites Graph of attacks with pruning: Optimizing stealthy jailbreak prompt generation for enhanced llm content moderation.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Graph of attacks with pruning: Optimizing stealthy jailbreak prompt generation for enhanced llm content moderation

Reference 41

Resolution
metadata mismatch
arxiv_id, observed 2026-05-11T11:11:05.655445Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:09672dccbdb56234729cc35913408d0093ae8cec4f496d3379192c2791274bea

Observation 2f1daa98-92c9-4d39-92c6-587cba99b950 · outbound

This paper cites Alphasteer: Learn- ing refusal steering with principled null-space constraint.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Alphasteer: Learn- ing refusal steering with principled null-space constraint

Reference 42

Resolution
verified exact
arxiv_id, observed 2026-05-11T11:11:05.700064Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:8d20c80bba7a1821f2df8d55d3a672dafc61741274e9e06d86ad8f4160d55d46

Observation 1b8c2cb7-810d-421d-8edd-42cd11a42593 · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 43

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.585401Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:2bd8ea5e9640f84b54aba1a364c2f2dc05af83847e4be18eeced9a9d8c93abfb

Observation da6b19da-2b98-47c7-a9ca-a36550563b6f · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 44

Resolution
verified exact
doi, observed 2026-05-10T15:10:31.480906Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:d608f84fc7b83686a60c33657d22663d7ca5ce6153a5db269d423551745c0997

Observation 95d76b98-1055-4ea3-9d45-bff5e1e27199 · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 45

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.619191Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:905417adf5e068ad99aa5fd6ef306e198db86ff028647721aabba91b0004be91

Observation ac155ce7-2c5b-4378-80c5-af1e36364540 · outbound

This paper cites Kimi K2.5: Visual Agentic Intelligence.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Kimi K2.5: Visual Agentic Intelligence

Reference 46

Resolution
verified exact
local_arxiv, observed 2026-05-11T11:11:05.455856Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:9e9e08017714fbb8bd5a57eedad6641b70446614ebd8e020cdea4243ca80cbd2

Observation 6c728998-3b2d-42e9-9500-5b663e24e0d7 · outbound

This paper cites Qwen3 Technical Report.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Qwen3 Technical Report

Reference 47

Resolution
verified exact
local_arxiv, observed 2026-05-11T11:11:05.484804Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:a61dd7fb4a03168c216bf75e210e478ad9f164ebad7bb04ecd585fc468378c70

Observation 0400511a-8c66-4178-8e4d-f5134b8ad98e · outbound

This paper cites GLM-4.5V and GLM-4.1V-Thinking: Towards Versatile Multimodal Reasoning with Scalable Reinforcement Learning.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs GLM-4.5V and GLM-4.1V-Thinking: Towards Versatile Multimodal Reasoning with Scalable Reinforcement Learning

Reference 48

Resolution
verified exact
local_arxiv, observed 2026-05-11T11:11:05.467585Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:e7df5ee007b2d36b6eefef6d48bf821cef586b1bd47cc12aa57050f2451d5f9e

Observation c49b15cc-542d-4760-bb08-87db5913faae · outbound

This paper cites Voyager: An Open-Ended Embodied Agent with Large Language Models.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Voyager: An Open-Ended Embodied Agent with Large Language Models

Reference 49

Resolution
verified exact
local_arxiv, observed 2026-05-11T11:11:05.638348Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:ed113f398a52c2824cba0ea9ef35daaee66f08300ec575f94faaad405209c827

Observation 21fd1ce9-24ff-44f1-a803-7f979c359d75 · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 50

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.610527Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:4f6db56b587cfa9b7a16330e0a0c9451993310b504de3fee4db549f7b687c182

Observation 5ae38cc5-e964-4cae-9244-bf7870fe0538 · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 51

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.607656Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:4aaff8f455563b7ae006a904cf0ded85d6f16340087a74ba9463c04ebdb2c6c4

Observation 4b8c64a4-72cc-4163-a3ea-5fcd5a327d41 · outbound

This paper cites Jailbreak large vision-language models through multi-modal linkage.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Jailbreak large vision-language models through multi-modal linkage

Reference 52

Resolution
verified exact
doi, observed 2026-05-10T15:10:31.489827Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:5f40aeb2b587276661e98684bad4c6ac622ea3087d6055718243297e401efce0

Observation fa7e3ed3-0462-4e1c-ace5-56ac4f9ed408 · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 53

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.616201Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:ec9b34e2e4d95adc93ec9ef3e77bb1ce579f92f47bef8dd02ea3ffa85b8c5ead

Observation 4fcebdfc-ab05-4d9a-aa17-7b06a7555fc7 · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 54

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.636280Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:9f027e34d17d6b03dafc11716932eba6af14c656eada5955eeb4ce6f587826f4

Observation 1e0820fd-23f2-43da-b1bb-fdece08d6bd6 · outbound

This paper cites doi:10.18653/v1/2025.findings-acl.745.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs doi:10.18653/v1/2025.findings-acl.745

Reference 55

Resolution
verified exact
doi, observed 2026-05-10T15:10:31.493000Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:76744e7dbbcc133abc130426dfd8926fc8ae55d950a20cf4c740d69cce2ac954

Observation 2c8098e4-cca3-4251-bcbf-635e660be0ad · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 56

Resolution
verified exact
arxiv_id, observed 2026-05-11T11:11:05.420723Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:0c8c8d054cc9949a6cfc2c6e662b474e1e2b4dc33344ee272e057ab4a3a7d5e3

Observation 1d61a655-41af-436f-99a8-5929f10ca057 · outbound

This paper cites Freeman, Frédo Durand, Eli Shechtman, and Xun Huang.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Freeman, Frédo Durand, Eli Shechtman, and Xun Huang

Reference 57

Resolution
verified exact
arxiv_id, observed 2026-05-10T15:10:31.483338Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:1cd44a7209e3eb3249e474789d7514093392e82fde19f5347bdcb5a4c5605fbf

Observation 18a0f2e9-5296-4341-928c-b76789fe7282 · outbound

This paper cites Jailbreak vision language models via bi-modal adversarial prompt.IEEE Transactions on Information Forensics and Security, 20:7153–7165, 2025.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Jailbreak vision language models via bi-modal adversarial prompt.IEEE Transactions on Information Forensics and Security, 20:7153–7165, 2025

Reference 58

Resolution
verified exact
arxiv_id, observed 2026-05-10T15:10:31.485946Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:89f2828ddf1a088768a11709e4fdef228a7aa82282113f518478f1733f7ad0fc

Observation 11f15b1e-bf2d-455c-94b2-bcfea0711a23 · outbound

This paper cites Freeman, Frédo Durand, Eli Shechtman, and Xun Huang.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Freeman, Frédo Durand, Eli Shechtman, and Xun Huang

Reference 59

Resolution
metadata mismatch
arxiv_id, observed 2026-05-10T15:10:31.488293Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:b6683946c2715d0cfbc81cf3d226238dc65dc59785ff066dfb1fe6118a4ef8cd

Observation 9907746f-35e6-4bc4-9247-2c87138b28bf · outbound

This paper cites Qwen3Guard Technical Report.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Qwen3Guard Technical Report

Reference 60

Resolution
verified exact
arxiv_id, observed 2026-05-13T22:33:37.835217Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:7cc18ba063ea44a0119ecb26fcfcb023464c7e3ba8c09a931184ce822e3bafe0

Observation 92d96a0d-5e38-4197-863b-238b806111ec · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 61

Resolution
unresolved
raw_fallback, observed 2026-05-18T08:02:31.604290Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:9734ca27098810d4567c41dec8e0c8bb307d8f25f33f8732a34076ed521968ae

Observation 087f8f43-3d0c-45bd-806c-a3acf0ff1aac · outbound

This paper cites an unresolved cited work.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Unresolved cited work

Reference 62

Resolution
verified exact
doi, observed 2026-05-10T15:10:31.491442Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:111a6c3be3f68e6dc61f5f23cc8fd19f2c8f956c482732f4311b0c7080273291

Observation 49b13a73-32e6-4f88-8d31-a8249e34a368 · outbound

This paper cites Universal and Transferable Adversarial Attacks on Aligned Language Models.

Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs Universal and Transferable Adversarial Attacks on Aligned Language Models

Reference 63

Resolution
verified exact
local_arxiv, observed 2026-05-11T11:11:05.623353Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-03T06:30:56.289259+00:00.

source=pdf_text observed=2026-05-10T15:06:43.140580Z digest=sha256:4a6961e6166a4b63b80e14c05efa53110ae3a4e0e1ef265a705fb6d1f2b154d9

Pith citing papers

Observation d430814e-b2b2-4e82-9c3d-bf34a6ec2e5f · inbound

Automatic Hard Example Synthesis with Multi-Level Agentic Data Curation cites this paper.

Automatic Hard Example Synthesis with Multi-Level Agentic Data Curation Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-02T02:44:13.644542Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-02T02:44:13.644542Z digest=sha256:75ce798e458847a6de6303d370e82844f19ba50167542b6ee69ca7406cfdf381