{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:W3QCTKUYC7ORMO5AL5M3AGBXIK","short_pith_number":"pith:W3QCTKUY","canonical_record":{"source":{"id":"2502.00735","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-02T10:05:08Z","cross_cats_sorted":["cs.AI","cs.SE"],"title_canon_sha256":"a8070ec2338b5d8ba65acc8b1be06712a8dd5e25c2425a05f995a27a9a40a277","abstract_canon_sha256":"a23a28d38565162638530c022c3045812c18beee925c7410a9b1c47936d17876"},"schema_version":"1.0"},"canonical_sha256":"b6e029aa9817dd163ba05f59b0183742b4b492ced1308f952d5d4dcb7cee371e","source":{"kind":"arxiv","id":"2502.00735","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.00735","created_at":"2026-07-05T11:04:44Z"},{"alias_kind":"arxiv_version","alias_value":"2502.00735v3","created_at":"2026-07-05T11:04:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.00735","created_at":"2026-07-05T11:04:44Z"},{"alias_kind":"pith_short_12","alias_value":"W3QCTKUYC7OR","created_at":"2026-07-05T11:04:44Z"},{"alias_kind":"pith_short_16","alias_value":"W3QCTKUYC7ORMO5A","created_at":"2026-07-05T11:04:44Z"},{"alias_kind":"pith_short_8","alias_value":"W3QCTKUY","created_at":"2026-07-05T11:04:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:W3QCTKUYC7ORMO5AL5M3AGBXIK","target":"record","payload":{"canonical_record":{"source":{"id":"2502.00735","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-02T10:05:08Z","cross_cats_sorted":["cs.AI","cs.SE"],"title_canon_sha256":"a8070ec2338b5d8ba65acc8b1be06712a8dd5e25c2425a05f995a27a9a40a277","abstract_canon_sha256":"a23a28d38565162638530c022c3045812c18beee925c7410a9b1c47936d17876"},"schema_version":"1.0"},"canonical_sha256":"b6e029aa9817dd163ba05f59b0183742b4b492ced1308f952d5d4dcb7cee371e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:04:44.829369Z","signature_b64":"c0o2WUQ2TpNSXnQTcxcFk/ceMQLl+Eaky4W7x0Ml4ctm5vASm3xAxSfIamthFrGNJxeHLbP7gevyVUGI3uRIBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b6e029aa9817dd163ba05f59b0183742b4b492ced1308f952d5d4dcb7cee371e","last_reissued_at":"2026-07-05T11:04:44.828874Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:04:44.828874Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.00735","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:04:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fmw0qFb2wwdOtCG4xr2SlOpGH93KmGexb/0/hMnqAdPdM6wOkCbxwc3gaqINmxMLl5wOcwS/mqsNDKJCf/sKCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T21:15:32.546044Z"},"content_sha256":"d471fa2a20443c7ddd9386239491e8c7da04366b49bdb84ceb15a0957d2db3fa","schema_version":"1.0","event_id":"sha256:d471fa2a20443c7ddd9386239491e8c7da04366b49bdb84ceb15a0957d2db3fa"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:W3QCTKUYC7ORMO5AL5M3AGBXIK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.SE"],"primary_cat":"cs.CR","authors_text":"Bo Li, Chun Wai Chiu, Huaming Chen, Kim-Kwang Raymond Choo, Linghan Huang","submitted_at":"2025-02-02T10:05:08Z","abstract_excerpt":"Large Language Models (LLMs) have seen widespread applications across various domains due to their growing ability to process diverse types of input data, including text, audio, image and video. While LLMs have demonstrated outstanding performance in understanding and generating contexts for different scenarios, they are vulnerable to prompt-based attacks, which are mostly via text input. In this paper, we introduce the first voice-based jailbreak attack against multimodal LLMs, termed as Flanking Attack, which can process different types of input simultaneously towards the multimodal LLMs. Ou"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.00735","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.00735/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:04:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VJJ7TsY26CnnXIcj0PMtfE05BLBEVIwIrZKJBkcFM63Z3t8HJ42PPbn6A+5crelDDjvZe35Ma8Tb9VWl5h3BDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T21:15:32.546578Z"},"content_sha256":"d8562ecb52cf62aaa0bd577571d764744e66f9564006592c9da800fcced5c65a","schema_version":"1.0","event_id":"sha256:d8562ecb52cf62aaa0bd577571d764744e66f9564006592c9da800fcced5c65a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/W3QCTKUYC7ORMO5AL5M3AGBXIK/bundle.json","state_url":"https://pith.science/pith/W3QCTKUYC7ORMO5AL5M3AGBXIK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/W3QCTKUYC7ORMO5AL5M3AGBXIK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T21:15:32Z","links":{"resolver":"https://pith.science/pith/W3QCTKUYC7ORMO5AL5M3AGBXIK","bundle":"https://pith.science/pith/W3QCTKUYC7ORMO5AL5M3AGBXIK/bundle.json","state":"https://pith.science/pith/W3QCTKUYC7ORMO5AL5M3AGBXIK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/W3QCTKUYC7ORMO5AL5M3AGBXIK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:W3QCTKUYC7ORMO5AL5M3AGBXIK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a23a28d38565162638530c022c3045812c18beee925c7410a9b1c47936d17876","cross_cats_sorted":["cs.AI","cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-02T10:05:08Z","title_canon_sha256":"a8070ec2338b5d8ba65acc8b1be06712a8dd5e25c2425a05f995a27a9a40a277"},"schema_version":"1.0","source":{"id":"2502.00735","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.00735","created_at":"2026-07-05T11:04:44Z"},{"alias_kind":"arxiv_version","alias_value":"2502.00735v3","created_at":"2026-07-05T11:04:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.00735","created_at":"2026-07-05T11:04:44Z"},{"alias_kind":"pith_short_12","alias_value":"W3QCTKUYC7OR","created_at":"2026-07-05T11:04:44Z"},{"alias_kind":"pith_short_16","alias_value":"W3QCTKUYC7ORMO5A","created_at":"2026-07-05T11:04:44Z"},{"alias_kind":"pith_short_8","alias_value":"W3QCTKUY","created_at":"2026-07-05T11:04:44Z"}],"graph_snapshots":[{"event_id":"sha256:d8562ecb52cf62aaa0bd577571d764744e66f9564006592c9da800fcced5c65a","target":"graph","created_at":"2026-07-05T11:04:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.00735/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) have seen widespread applications across various domains due to their growing ability to process diverse types of input data, including text, audio, image and video. While LLMs have demonstrated outstanding performance in understanding and generating contexts for different scenarios, they are vulnerable to prompt-based attacks, which are mostly via text input. In this paper, we introduce the first voice-based jailbreak attack against multimodal LLMs, termed as Flanking Attack, which can process different types of input simultaneously towards the multimodal LLMs. Ou","authors_text":"Bo Li, Chun Wai Chiu, Huaming Chen, Kim-Kwang Raymond Choo, Linghan Huang","cross_cats":["cs.AI","cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-02T10:05:08Z","title":"`Do as I say not as I do': A Semi-Automated Approach for Jailbreak Prompt Attack against Multimodal LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.00735","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d471fa2a20443c7ddd9386239491e8c7da04366b49bdb84ceb15a0957d2db3fa","target":"record","created_at":"2026-07-05T11:04:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a23a28d38565162638530c022c3045812c18beee925c7410a9b1c47936d17876","cross_cats_sorted":["cs.AI","cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-02T10:05:08Z","title_canon_sha256":"a8070ec2338b5d8ba65acc8b1be06712a8dd5e25c2425a05f995a27a9a40a277"},"schema_version":"1.0","source":{"id":"2502.00735","kind":"arxiv","version":3}},"canonical_sha256":"b6e029aa9817dd163ba05f59b0183742b4b492ced1308f952d5d4dcb7cee371e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b6e029aa9817dd163ba05f59b0183742b4b492ced1308f952d5d4dcb7cee371e","first_computed_at":"2026-07-05T11:04:44.828874Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:04:44.828874Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"c0o2WUQ2TpNSXnQTcxcFk/ceMQLl+Eaky4W7x0Ml4ctm5vASm3xAxSfIamthFrGNJxeHLbP7gevyVUGI3uRIBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:04:44.829369Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.00735","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d471fa2a20443c7ddd9386239491e8c7da04366b49bdb84ceb15a0957d2db3fa","sha256:d8562ecb52cf62aaa0bd577571d764744e66f9564006592c9da800fcced5c65a"],"state_sha256":"7a3e9f397ddc2efabd58156382104b748edf8056935e1b55bc8ff21105980896"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8qoA6pYK4y8HsDfySppL8yVQUdNrGsvsvE69Sr4sAGaj9VjYJzAxj8nV9zhC8H3WMB/qNa5qxtOobxwQ8DaQCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T21:15:32.550519Z","bundle_sha256":"18780c52719c763aa9ca025617520ed1cf2b0144fcbe0c2037ceb0c23818f4ee"}}