{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:X4TS4FXB4GQISR5RZVTQCFMRXT","short_pith_number":"pith:X4TS4FXB","canonical_record":{"source":{"id":"2505.16446","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-22T09:34:47Z","cross_cats_sorted":[],"title_canon_sha256":"70e6b4fd7ee29174ed5e117b7a634f24feb9cbd77add773c58cff7b3f63817dd","abstract_canon_sha256":"720287f5727f0a88b2e54bd961d4972bfe88c7435dcf63a2455f45b8296ce9b9"},"schema_version":"1.0"},"canonical_sha256":"bf272e16e1e1a08947b1cd67011591bce3009d4dee0646de7df37d5f41b08828","source":{"kind":"arxiv","id":"2505.16446","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.16446","created_at":"2026-07-05T11:07:35Z"},{"alias_kind":"arxiv_version","alias_value":"2505.16446v1","created_at":"2026-07-05T11:07:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.16446","created_at":"2026-07-05T11:07:35Z"},{"alias_kind":"pith_short_12","alias_value":"X4TS4FXB4GQI","created_at":"2026-07-05T11:07:35Z"},{"alias_kind":"pith_short_16","alias_value":"X4TS4FXB4GQISR5R","created_at":"2026-07-05T11:07:35Z"},{"alias_kind":"pith_short_8","alias_value":"X4TS4FXB","created_at":"2026-07-05T11:07:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:X4TS4FXB4GQISR5RZVTQCFMRXT","target":"record","payload":{"canonical_record":{"source":{"id":"2505.16446","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-22T09:34:47Z","cross_cats_sorted":[],"title_canon_sha256":"70e6b4fd7ee29174ed5e117b7a634f24feb9cbd77add773c58cff7b3f63817dd","abstract_canon_sha256":"720287f5727f0a88b2e54bd961d4972bfe88c7435dcf63a2455f45b8296ce9b9"},"schema_version":"1.0"},"canonical_sha256":"bf272e16e1e1a08947b1cd67011591bce3009d4dee0646de7df37d5f41b08828","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:07:35.675171Z","signature_b64":"pRvKEaxy8brrAeOGED3D90Ce9AQeYJ5ACx6IfMCHZcNJArBRL+lo+D07HSO1NGVlxWUfTs+JgQLPzLbI+UYSBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bf272e16e1e1a08947b1cd67011591bce3009d4dee0646de7df37d5f41b08828","last_reissued_at":"2026-07-05T11:07:35.674628Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:07:35.674628Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.16446","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:07:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GYFmK+VvHPcp5AXox3630ZzvI3P6nDgRFt7/g5Fcc3+8J8sKZEcihIhpfCkE273cxOgVF2C5Dr4BiE324ytUBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T09:11:57.520042Z"},"content_sha256":"a4c12ab46c345cbe01e35c7384a00c793fc1af3892da5b6041ddd56117ef9854","schema_version":"1.0","event_id":"sha256:a4c12ab46c345cbe01e35c7384a00c793fc1af3892da5b6041ddd56117ef9854"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:X4TS4FXB4GQISR5RZVTQCFMRXT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Implicit Jailbreak Attacks via Cross-Modal Information Concealment on Vision-Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Cong Tian, Handing Wang, Yaochu Jin, Zhaoxin Wang","submitted_at":"2025-05-22T09:34:47Z","abstract_excerpt":"Multimodal large language models (MLLMs) enable powerful cross-modal reasoning capabilities. However, the expanded input space introduces new attack surfaces. Previous jailbreak attacks often inject malicious instructions from text into less aligned modalities, such as vision. As MLLMs increasingly incorporate cross-modal consistency and alignment mechanisms, such explicit attacks become easier to detect and block. In this work, we propose a novel implicit jailbreak framework termed IJA that stealthily embeds malicious instructions into images via least significant bit steganography and couple"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.16446","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.16446/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:07:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hnscLm9G5pmqyQmnPd8ST7gPgc0mBTQCxSl9qUyVMuOeyJGdjVqMPUgiw68AgFKF5yx8KvuQVXU/3Kvlv7B1Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T09:11:57.520561Z"},"content_sha256":"963a1b72f3ef698f8014f54a8c1b520f093e0d16c389dcf0aef8229eb30760c3","schema_version":"1.0","event_id":"sha256:963a1b72f3ef698f8014f54a8c1b520f093e0d16c389dcf0aef8229eb30760c3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/X4TS4FXB4GQISR5RZVTQCFMRXT/bundle.json","state_url":"https://pith.science/pith/X4TS4FXB4GQISR5RZVTQCFMRXT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/X4TS4FXB4GQISR5RZVTQCFMRXT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T09:11:57Z","links":{"resolver":"https://pith.science/pith/X4TS4FXB4GQISR5RZVTQCFMRXT","bundle":"https://pith.science/pith/X4TS4FXB4GQISR5RZVTQCFMRXT/bundle.json","state":"https://pith.science/pith/X4TS4FXB4GQISR5RZVTQCFMRXT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/X4TS4FXB4GQISR5RZVTQCFMRXT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:X4TS4FXB4GQISR5RZVTQCFMRXT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"720287f5727f0a88b2e54bd961d4972bfe88c7435dcf63a2455f45b8296ce9b9","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-22T09:34:47Z","title_canon_sha256":"70e6b4fd7ee29174ed5e117b7a634f24feb9cbd77add773c58cff7b3f63817dd"},"schema_version":"1.0","source":{"id":"2505.16446","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.16446","created_at":"2026-07-05T11:07:35Z"},{"alias_kind":"arxiv_version","alias_value":"2505.16446v1","created_at":"2026-07-05T11:07:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.16446","created_at":"2026-07-05T11:07:35Z"},{"alias_kind":"pith_short_12","alias_value":"X4TS4FXB4GQI","created_at":"2026-07-05T11:07:35Z"},{"alias_kind":"pith_short_16","alias_value":"X4TS4FXB4GQISR5R","created_at":"2026-07-05T11:07:35Z"},{"alias_kind":"pith_short_8","alias_value":"X4TS4FXB","created_at":"2026-07-05T11:07:35Z"}],"graph_snapshots":[{"event_id":"sha256:963a1b72f3ef698f8014f54a8c1b520f093e0d16c389dcf0aef8229eb30760c3","target":"graph","created_at":"2026-07-05T11:07:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.16446/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multimodal large language models (MLLMs) enable powerful cross-modal reasoning capabilities. However, the expanded input space introduces new attack surfaces. Previous jailbreak attacks often inject malicious instructions from text into less aligned modalities, such as vision. As MLLMs increasingly incorporate cross-modal consistency and alignment mechanisms, such explicit attacks become easier to detect and block. In this work, we propose a novel implicit jailbreak framework termed IJA that stealthily embeds malicious instructions into images via least significant bit steganography and couple","authors_text":"Cong Tian, Handing Wang, Yaochu Jin, Zhaoxin Wang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-22T09:34:47Z","title":"Implicit Jailbreak Attacks via Cross-Modal Information Concealment on Vision-Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.16446","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a4c12ab46c345cbe01e35c7384a00c793fc1af3892da5b6041ddd56117ef9854","target":"record","created_at":"2026-07-05T11:07:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"720287f5727f0a88b2e54bd961d4972bfe88c7435dcf63a2455f45b8296ce9b9","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-22T09:34:47Z","title_canon_sha256":"70e6b4fd7ee29174ed5e117b7a634f24feb9cbd77add773c58cff7b3f63817dd"},"schema_version":"1.0","source":{"id":"2505.16446","kind":"arxiv","version":1}},"canonical_sha256":"bf272e16e1e1a08947b1cd67011591bce3009d4dee0646de7df37d5f41b08828","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bf272e16e1e1a08947b1cd67011591bce3009d4dee0646de7df37d5f41b08828","first_computed_at":"2026-07-05T11:07:35.674628Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:07:35.674628Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"pRvKEaxy8brrAeOGED3D90Ce9AQeYJ5ACx6IfMCHZcNJArBRL+lo+D07HSO1NGVlxWUfTs+JgQLPzLbI+UYSBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:07:35.675171Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.16446","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a4c12ab46c345cbe01e35c7384a00c793fc1af3892da5b6041ddd56117ef9854","sha256:963a1b72f3ef698f8014f54a8c1b520f093e0d16c389dcf0aef8229eb30760c3"],"state_sha256":"1108b2d2ef8c2b0305d5906be741d68f0e05f2f03c438bf7c91090e479a8a1ac"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KBRSNuNPkrfAdTkCzd2FHuu7/57ja7uYA4+32CF6O4bQgU9LB7RVLhwAo5pku3OP8zY6XKqtoVJ9W9c7EqgAAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T09:11:57.524647Z","bundle_sha256":"c577e6cb39ccab8ca0bdc5687c1cc9b0b3147f7fc5843b27cdac6dc26cb02546"}}