{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:TIAMFFWUNLVKUOCXHG3YV4FX5T","short_pith_number":"pith:TIAMFFWU","canonical_record":{"source":{"id":"2506.00548","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-31T13:11:14Z","cross_cats_sorted":["cs.CL","cs.LG"],"title_canon_sha256":"db0fc2458f186f26306d458f5a13cb3bafc27475ffe7b25cc946f332a867867c","abstract_canon_sha256":"2a5f049972ff34fe2d788ccbd2b0a2b3743f42620143c9b186610a6a68aff2b6"},"schema_version":"1.0"},"canonical_sha256":"9a00c296d46aeaaa385739b78af0b7ecf90513fac3ead3233759115d7dad898a","source":{"kind":"arxiv","id":"2506.00548","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.00548","created_at":"2026-07-05T11:13:36Z"},{"alias_kind":"arxiv_version","alias_value":"2506.00548v1","created_at":"2026-07-05T11:13:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.00548","created_at":"2026-07-05T11:13:36Z"},{"alias_kind":"pith_short_12","alias_value":"TIAMFFWUNLVK","created_at":"2026-07-05T11:13:36Z"},{"alias_kind":"pith_short_16","alias_value":"TIAMFFWUNLVKUOCX","created_at":"2026-07-05T11:13:36Z"},{"alias_kind":"pith_short_8","alias_value":"TIAMFFWU","created_at":"2026-07-05T11:13:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:TIAMFFWUNLVKUOCXHG3YV4FX5T","target":"record","payload":{"canonical_record":{"source":{"id":"2506.00548","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-31T13:11:14Z","cross_cats_sorted":["cs.CL","cs.LG"],"title_canon_sha256":"db0fc2458f186f26306d458f5a13cb3bafc27475ffe7b25cc946f332a867867c","abstract_canon_sha256":"2a5f049972ff34fe2d788ccbd2b0a2b3743f42620143c9b186610a6a68aff2b6"},"schema_version":"1.0"},"canonical_sha256":"9a00c296d46aeaaa385739b78af0b7ecf90513fac3ead3233759115d7dad898a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:13:36.764728Z","signature_b64":"a2qpxa0OOUM1s+zQ9mNh8IOckwfvjN3k3tchY3oCzR2r+llLa2dyt8fF/SPnRs0yUoMj6xEAz3ODlBEtq3w3Ag==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9a00c296d46aeaaa385739b78af0b7ecf90513fac3ead3233759115d7dad898a","last_reissued_at":"2026-07-05T11:13:36.764253Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:13:36.764253Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.00548","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:13:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dIumFIi9PT2lPmhucE6FOwHeEkeJlgXUeEo9snXKG3PqtHl5LjrmnS4G4/nDIq6lRuV/pbJ2ZQdoGQGz7A5AAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T20:07:25.426472Z"},"content_sha256":"d47b3eee31d7c526041eb37f07324c70ada446c98632b7e56aa64cfee74a2496","schema_version":"1.0","event_id":"sha256:d47b3eee31d7c526041eb37f07324c70ada446c98632b7e56aa64cfee74a2496"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:TIAMFFWUNLVKUOCXHG3YV4FX5T","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Con Instruction: Universal Jailbreaking of Multimodal Large Language Models via Non-Textual Modalities","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CL","cs.LG"],"primary_cat":"cs.CR","authors_text":"Iryna Gurevych, Jiahui Geng, Preslav Nakov, Thy Thy Tran","submitted_at":"2025-05-31T13:11:14Z","abstract_excerpt":"Existing attacks against multimodal language models (MLLMs) primarily communicate instructions through text accompanied by adversarial images. In contrast, we exploit the capabilities of MLLMs to interpret non-textual instructions, specifically, adversarial images or audio generated by our novel method, Con Instruction. We optimize these adversarial examples to align closely with target instructions in the embedding space, revealing the detrimental implications of MLLMs' sophisticated understanding. Unlike prior work, our method does not require training data or preprocessing of textual instru"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.00548","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.00548/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:13:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"i/xqZNnX+Bf7yH8W5FRVTCAJNQD55QvhB8miyrtG0L2LTMY6D5+b66R5IV02rHPtgtd8WYRG0E0taEK79LpLDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T20:07:25.427421Z"},"content_sha256":"80ec02fbb10e000582256fa522ba43244c22e043ba65653059438061655aed53","schema_version":"1.0","event_id":"sha256:80ec02fbb10e000582256fa522ba43244c22e043ba65653059438061655aed53"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TIAMFFWUNLVKUOCXHG3YV4FX5T/bundle.json","state_url":"https://pith.science/pith/TIAMFFWUNLVKUOCXHG3YV4FX5T/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TIAMFFWUNLVKUOCXHG3YV4FX5T/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T20:07:25Z","links":{"resolver":"https://pith.science/pith/TIAMFFWUNLVKUOCXHG3YV4FX5T","bundle":"https://pith.science/pith/TIAMFFWUNLVKUOCXHG3YV4FX5T/bundle.json","state":"https://pith.science/pith/TIAMFFWUNLVKUOCXHG3YV4FX5T/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TIAMFFWUNLVKUOCXHG3YV4FX5T/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:TIAMFFWUNLVKUOCXHG3YV4FX5T","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2a5f049972ff34fe2d788ccbd2b0a2b3743f42620143c9b186610a6a68aff2b6","cross_cats_sorted":["cs.CL","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-31T13:11:14Z","title_canon_sha256":"db0fc2458f186f26306d458f5a13cb3bafc27475ffe7b25cc946f332a867867c"},"schema_version":"1.0","source":{"id":"2506.00548","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.00548","created_at":"2026-07-05T11:13:36Z"},{"alias_kind":"arxiv_version","alias_value":"2506.00548v1","created_at":"2026-07-05T11:13:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.00548","created_at":"2026-07-05T11:13:36Z"},{"alias_kind":"pith_short_12","alias_value":"TIAMFFWUNLVK","created_at":"2026-07-05T11:13:36Z"},{"alias_kind":"pith_short_16","alias_value":"TIAMFFWUNLVKUOCX","created_at":"2026-07-05T11:13:36Z"},{"alias_kind":"pith_short_8","alias_value":"TIAMFFWU","created_at":"2026-07-05T11:13:36Z"}],"graph_snapshots":[{"event_id":"sha256:80ec02fbb10e000582256fa522ba43244c22e043ba65653059438061655aed53","target":"graph","created_at":"2026-07-05T11:13:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.00548/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Existing attacks against multimodal language models (MLLMs) primarily communicate instructions through text accompanied by adversarial images. In contrast, we exploit the capabilities of MLLMs to interpret non-textual instructions, specifically, adversarial images or audio generated by our novel method, Con Instruction. We optimize these adversarial examples to align closely with target instructions in the embedding space, revealing the detrimental implications of MLLMs' sophisticated understanding. Unlike prior work, our method does not require training data or preprocessing of textual instru","authors_text":"Iryna Gurevych, Jiahui Geng, Preslav Nakov, Thy Thy Tran","cross_cats":["cs.CL","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-31T13:11:14Z","title":"Con Instruction: Universal Jailbreaking of Multimodal Large Language Models via Non-Textual Modalities"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.00548","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d47b3eee31d7c526041eb37f07324c70ada446c98632b7e56aa64cfee74a2496","target":"record","created_at":"2026-07-05T11:13:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2a5f049972ff34fe2d788ccbd2b0a2b3743f42620143c9b186610a6a68aff2b6","cross_cats_sorted":["cs.CL","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-31T13:11:14Z","title_canon_sha256":"db0fc2458f186f26306d458f5a13cb3bafc27475ffe7b25cc946f332a867867c"},"schema_version":"1.0","source":{"id":"2506.00548","kind":"arxiv","version":1}},"canonical_sha256":"9a00c296d46aeaaa385739b78af0b7ecf90513fac3ead3233759115d7dad898a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9a00c296d46aeaaa385739b78af0b7ecf90513fac3ead3233759115d7dad898a","first_computed_at":"2026-07-05T11:13:36.764253Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:13:36.764253Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"a2qpxa0OOUM1s+zQ9mNh8IOckwfvjN3k3tchY3oCzR2r+llLa2dyt8fF/SPnRs0yUoMj6xEAz3ODlBEtq3w3Ag==","signature_status":"signed_v1","signed_at":"2026-07-05T11:13:36.764728Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.00548","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d47b3eee31d7c526041eb37f07324c70ada446c98632b7e56aa64cfee74a2496","sha256:80ec02fbb10e000582256fa522ba43244c22e043ba65653059438061655aed53"],"state_sha256":"47ee886be21f8895cf9c39b53915e8ed58a3883de8156b093d572e472bb45792"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ijoFdifqNrVlrEqXj9pZyIA2lh6swuiq/W8p5TcABs1bg8fAHHSisUq6aThNFq3RQOdVkiiVz1f11JrcEVwMDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T20:07:25.434663Z","bundle_sha256":"d3e64503534f206534f7063195a814b87bc3d7d4cf08a5a3b278f55d8fd4dd0d"}}