{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:OGFIMHX7OPPZDPVNNMC475TYML","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e25f0c339a4b71c70c6501c29e0a08007ef9012340a5cd7593ec3348a9410277","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-06-20T05:30:25Z","title_canon_sha256":"74c9dd2a484b42e811ae12e65fc1817eb7b2dfedea0b90c879054e661fdeaf28"},"schema_version":"1.0","source":{"id":"2506.16760","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.16760","created_at":"2026-07-05T11:24:42Z"},{"alias_kind":"arxiv_version","alias_value":"2506.16760v1","created_at":"2026-07-05T11:24:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.16760","created_at":"2026-07-05T11:24:42Z"},{"alias_kind":"pith_short_12","alias_value":"OGFIMHX7OPPZ","created_at":"2026-07-05T11:24:42Z"},{"alias_kind":"pith_short_16","alias_value":"OGFIMHX7OPPZDPVN","created_at":"2026-07-05T11:24:42Z"},{"alias_kind":"pith_short_8","alias_value":"OGFIMHX7","created_at":"2026-07-05T11:24:42Z"}],"graph_snapshots":[{"event_id":"sha256:ef8f1094e6f5be767caf7b855cc8951bac5b36f82a1d3b6d94ea1e80a12052f3","target":"graph","created_at":"2026-07-05T11:24:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.16760/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Vision-Language Models (LVLMs) demonstrate exceptional performance across multimodal tasks, yet remain vulnerable to jailbreak attacks that bypass built-in safety mechanisms to elicit restricted content generation. Existing black-box jailbreak methods primarily rely on adversarial textual prompts or image perturbations, yet these approaches are highly detectable by standard content filtering systems and exhibit low query and computational efficiency. In this work, we present Cross-modal Adversarial Multimodal Obfuscation (CAMO), a novel black-box jailbreak attack framework that decompose","authors_text":"Lei Jiang, Liangli Zhen, Xiaobing Sun, Xiaohua Xu, Zhen Li, Zixun Zhang, Zizhou Wang","cross_cats":["cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-06-20T05:30:25Z","title":"Cross-Modal Obfuscation for Jailbreak Attacks on Large Vision-Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.16760","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ea6328a3300bc009eee94d8842003402e3c9863acae78e74d761f2e2a22f34f9","target":"record","created_at":"2026-07-05T11:24:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e25f0c339a4b71c70c6501c29e0a08007ef9012340a5cd7593ec3348a9410277","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2025-06-20T05:30:25Z","title_canon_sha256":"74c9dd2a484b42e811ae12e65fc1817eb7b2dfedea0b90c879054e661fdeaf28"},"schema_version":"1.0","source":{"id":"2506.16760","kind":"arxiv","version":1}},"canonical_sha256":"718a861eff73df91bead6b05cff67862d5046942504efc565555119b408ff5c4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"718a861eff73df91bead6b05cff67862d5046942504efc565555119b408ff5c4","first_computed_at":"2026-07-05T11:24:42.575099Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:24:42.575099Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GNCwprNs5acabCkmivW0tm4dX1XQ+jgIKJ5BEaKmMDqYeiNh8EpNwtDOFC/IWO3aZO3LnVYe2bonQ/wHWwXnBg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:24:42.575768Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.16760","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ea6328a3300bc009eee94d8842003402e3c9863acae78e74d761f2e2a22f34f9","sha256:ef8f1094e6f5be767caf7b855cc8951bac5b36f82a1d3b6d94ea1e80a12052f3"],"state_sha256":"714619f9c7b660aa05b9df715be17e754fbe27b56fa02381528fdf2850ea5ca3"}