{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:OGFIMHX7OPPZDPVNNMC475TYML","short_pith_number":"pith:OGFIMHX7","canonical_record":{"source":{"id":"2506.16760","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-06-20T05:30:25Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"74c9dd2a484b42e811ae12e65fc1817eb7b2dfedea0b90c879054e661fdeaf28","abstract_canon_sha256":"e25f0c339a4b71c70c6501c29e0a08007ef9012340a5cd7593ec3348a9410277"},"schema_version":"1.0"},"canonical_sha256":"718a861eff73df91bead6b05cff67862d5046942504efc565555119b408ff5c4","source":{"kind":"arxiv","id":"2506.16760","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.16760","created_at":"2026-07-05T11:24:42Z"},{"alias_kind":"arxiv_version","alias_value":"2506.16760v1","created_at":"2026-07-05T11:24:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.16760","created_at":"2026-07-05T11:24:42Z"},{"alias_kind":"pith_short_12","alias_value":"OGFIMHX7OPPZ","created_at":"2026-07-05T11:24:42Z"},{"alias_kind":"pith_short_16","alias_value":"OGFIMHX7OPPZDPVN","created_at":"2026-07-05T11:24:42Z"},{"alias_kind":"pith_short_8","alias_value":"OGFIMHX7","created_at":"2026-07-05T11:24:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:OGFIMHX7OPPZDPVNNMC475TYML","target":"record","payload":{"canonical_record":{"source":{"id":"2506.16760","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-06-20T05:30:25Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"74c9dd2a484b42e811ae12e65fc1817eb7b2dfedea0b90c879054e661fdeaf28","abstract_canon_sha256":"e25f0c339a4b71c70c6501c29e0a08007ef9012340a5cd7593ec3348a9410277"},"schema_version":"1.0"},"canonical_sha256":"718a861eff73df91bead6b05cff67862d5046942504efc565555119b408ff5c4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:24:42.575768Z","signature_b64":"GNCwprNs5acabCkmivW0tm4dX1XQ+jgIKJ5BEaKmMDqYeiNh8EpNwtDOFC/IWO3aZO3LnVYe2bonQ/wHWwXnBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"718a861eff73df91bead6b05cff67862d5046942504efc565555119b408ff5c4","last_reissued_at":"2026-07-05T11:24:42.575099Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:24:42.575099Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.16760","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:24:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"D0UP5GtrDlT0wUgsAZnWv8FaRCiNRyD6Ng46gH+CBnJYRxGsBE8Gz5VjbXa56oeKlNfnvQDpuRXCH6BAE8ObCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T01:21:03.801543Z"},"content_sha256":"ea6328a3300bc009eee94d8842003402e3c9863acae78e74d761f2e2a22f34f9","schema_version":"1.0","event_id":"sha256:ea6328a3300bc009eee94d8842003402e3c9863acae78e74d761f2e2a22f34f9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:OGFIMHX7OPPZDPVNNMC475TYML","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Cross-Modal Obfuscation for Jailbreak Attacks on Large Vision-Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.CL","authors_text":"Lei Jiang, Liangli Zhen, Xiaobing Sun, Xiaohua Xu, Zhen Li, Zixun Zhang, Zizhou Wang","submitted_at":"2025-06-20T05:30:25Z","abstract_excerpt":"Large Vision-Language Models (LVLMs) demonstrate exceptional performance across multimodal tasks, yet remain vulnerable to jailbreak attacks that bypass built-in safety mechanisms to elicit restricted content generation. Existing black-box jailbreak methods primarily rely on adversarial textual prompts or image perturbations, yet these approaches are highly detectable by standard content filtering systems and exhibit low query and computational efficiency. In this work, we present Cross-modal Adversarial Multimodal Obfuscation (CAMO), a novel black-box jailbreak attack framework that decompose"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.16760","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.16760/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:24:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"66o4cepy7VpZ/6fNBMf4NVQw+LKpF7HRuAiX7QueI6OdY2hTgGtMGGZdXMGRubNSJlsS+9rNjPbw8pCq9uVZBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T01:21:03.802428Z"},"content_sha256":"ef8f1094e6f5be767caf7b855cc8951bac5b36f82a1d3b6d94ea1e80a12052f3","schema_version":"1.0","event_id":"sha256:ef8f1094e6f5be767caf7b855cc8951bac5b36f82a1d3b6d94ea1e80a12052f3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OGFIMHX7OPPZDPVNNMC475TYML/bundle.json","state_url":"https://pith.science/pith/OGFIMHX7OPPZDPVNNMC475TYML/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OGFIMHX7OPPZDPVNNMC475TYML/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T01:21:03Z","links":{"resolver":"https://pith.science/pith/OGFIMHX7OPPZDPVNNMC475TYML","bundle":"https://pith.science/pith/OGFIMHX7OPPZDPVNNMC475TYML/bundle.json","state":"https://pith.science/pith/OGFIMHX7OPPZDPVNNMC475TYML/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OGFIMHX7OPPZDPVNNMC475TYML/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:OGFIMHX7OPPZDPVNNMC475TYML","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e25f0c339a4b71c70c6501c29e0a08007ef9012340a5cd7593ec3348a9410277","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-06-20T05:30:25Z","title_canon_sha256":"74c9dd2a484b42e811ae12e65fc1817eb7b2dfedea0b90c879054e661fdeaf28"},"schema_version":"1.0","source":{"id":"2506.16760","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.16760","created_at":"2026-07-05T11:24:42Z"},{"alias_kind":"arxiv_version","alias_value":"2506.16760v1","created_at":"2026-07-05T11:24:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.16760","created_at":"2026-07-05T11:24:42Z"},{"alias_kind":"pith_short_12","alias_value":"OGFIMHX7OPPZ","created_at":"2026-07-05T11:24:42Z"},{"alias_kind":"pith_short_16","alias_value":"OGFIMHX7OPPZDPVN","created_at":"2026-07-05T11:24:42Z"},{"alias_kind":"pith_short_8","alias_value":"OGFIMHX7","created_at":"2026-07-05T11:24:42Z"}],"graph_snapshots":[{"event_id":"sha256:ef8f1094e6f5be767caf7b855cc8951bac5b36f82a1d3b6d94ea1e80a12052f3","target":"graph","created_at":"2026-07-05T11:24:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.16760/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Vision-Language Models (LVLMs) demonstrate exceptional performance across multimodal tasks, yet remain vulnerable to jailbreak attacks that bypass built-in safety mechanisms to elicit restricted content generation. Existing black-box jailbreak methods primarily rely on adversarial textual prompts or image perturbations, yet these approaches are highly detectable by standard content filtering systems and exhibit low query and computational efficiency. In this work, we present Cross-modal Adversarial Multimodal Obfuscation (CAMO), a novel black-box jailbreak attack framework that decompose","authors_text":"Lei Jiang, Liangli Zhen, Xiaobing Sun, Xiaohua Xu, Zhen Li, Zixun Zhang, Zizhou Wang","cross_cats":["cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-06-20T05:30:25Z","title":"Cross-Modal Obfuscation for Jailbreak Attacks on Large Vision-Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.16760","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ea6328a3300bc009eee94d8842003402e3c9863acae78e74d761f2e2a22f34f9","target":"record","created_at":"2026-07-05T11:24:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e25f0c339a4b71c70c6501c29e0a08007ef9012340a5cd7593ec3348a9410277","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-06-20T05:30:25Z","title_canon_sha256":"74c9dd2a484b42e811ae12e65fc1817eb7b2dfedea0b90c879054e661fdeaf28"},"schema_version":"1.0","source":{"id":"2506.16760","kind":"arxiv","version":1}},"canonical_sha256":"718a861eff73df91bead6b05cff67862d5046942504efc565555119b408ff5c4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"718a861eff73df91bead6b05cff67862d5046942504efc565555119b408ff5c4","first_computed_at":"2026-07-05T11:24:42.575099Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:24:42.575099Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GNCwprNs5acabCkmivW0tm4dX1XQ+jgIKJ5BEaKmMDqYeiNh8EpNwtDOFC/IWO3aZO3LnVYe2bonQ/wHWwXnBg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:24:42.575768Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.16760","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ea6328a3300bc009eee94d8842003402e3c9863acae78e74d761f2e2a22f34f9","sha256:ef8f1094e6f5be767caf7b855cc8951bac5b36f82a1d3b6d94ea1e80a12052f3"],"state_sha256":"714619f9c7b660aa05b9df715be17e754fbe27b56fa02381528fdf2850ea5ca3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5RnLVeuJXyR/DwqxCNTZmz2+FuOmiRSIiwFRQfyB3pdDCDEtmBIA1S8Q7Xk8DV8wxXGgyKyX1gEmSqnKT2rABg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T01:21:03.808216Z","bundle_sha256":"d8754864a2d0f832976ac779df3f4efe05b765f3fbf93c3b06f72f1befcc6d83"}}