{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:Y3UBUEWX7CEDO4PJFYSFOXVXO5","short_pith_number":"pith:Y3UBUEWX","canonical_record":{"source":{"id":"2506.01307","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T04:33:56Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7420bbcf7f6b38402c2aaa68d60083a1e55ff9ef9ecfcb207f563052cd74f898","abstract_canon_sha256":"29dc3f11cbf48f229c2ed3a1384cceb38436e285fb5564b4a9c65cdc32b126ac"},"schema_version":"1.0"},"canonical_sha256":"c6e81a12d7f8883771e92e24575eb77760e05158139c6718db06d1ed3dd451bb","source":{"kind":"arxiv","id":"2506.01307","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.01307","created_at":"2026-07-05T11:14:11Z"},{"alias_kind":"arxiv_version","alias_value":"2506.01307v1","created_at":"2026-07-05T11:14:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.01307","created_at":"2026-07-05T11:14:11Z"},{"alias_kind":"pith_short_12","alias_value":"Y3UBUEWX7CED","created_at":"2026-07-05T11:14:11Z"},{"alias_kind":"pith_short_16","alias_value":"Y3UBUEWX7CEDO4PJ","created_at":"2026-07-05T11:14:11Z"},{"alias_kind":"pith_short_8","alias_value":"Y3UBUEWX","created_at":"2026-07-05T11:14:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:Y3UBUEWX7CEDO4PJFYSFOXVXO5","target":"record","payload":{"canonical_record":{"source":{"id":"2506.01307","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T04:33:56Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7420bbcf7f6b38402c2aaa68d60083a1e55ff9ef9ecfcb207f563052cd74f898","abstract_canon_sha256":"29dc3f11cbf48f229c2ed3a1384cceb38436e285fb5564b4a9c65cdc32b126ac"},"schema_version":"1.0"},"canonical_sha256":"c6e81a12d7f8883771e92e24575eb77760e05158139c6718db06d1ed3dd451bb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:14:11.472313Z","signature_b64":"zeoP0wss9W7jobONvA3ulUgW7pz1lwxbV/nCHI88119fgRVgv5bB59iqRuZNoEsraJvl9ZobcgtKVMa4wFqyDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c6e81a12d7f8883771e92e24575eb77760e05158139c6718db06d1ed3dd451bb","last_reissued_at":"2026-07-05T11:14:11.471876Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:14:11.471876Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.01307","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:14:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zNRkmas05JwnnrcYlo3knTyM/9Wvv4t4Ze8VJHvRyqeKHcl/3SPlaEzyX/tJhcVdqv1v296Wv0BoYs/SyvkyDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T01:38:22.212757Z"},"content_sha256":"3642504763c537bfbf87c988d2fb690956f698ee67a2afb087319aab1e857a1d","schema_version":"1.0","event_id":"sha256:3642504763c537bfbf87c988d2fb690956f698ee67a2afb087319aab1e857a1d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:Y3UBUEWX7CEDO4PJFYSFOXVXO5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Align is not Enough: Multimodal Universal Jailbreak Attack against Multimodal Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Hanwang Zhang, Jing Liu, Richang Hong, Wenbo Hu, Yinpeng Dong, Youze Wang","submitted_at":"2025-06-02T04:33:56Z","abstract_excerpt":"Large Language Models (LLMs) have evolved into Multimodal Large Language Models (MLLMs), significantly enhancing their capabilities by integrating visual information and other types, thus aligning more closely with the nature of human intelligence, which processes a variety of data forms beyond just text. Despite advancements, the undesirable generation of these models remains a critical concern, particularly due to vulnerabilities exposed by text-based jailbreak attacks, which have represented a significant threat by challenging existing safety protocols. Motivated by the unique security risk"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.01307","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.01307/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:14:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yM+xrJfT31vg50yuXGJd74MMxV54Mt/1DhrP/Bup7nj4dzFaUiHJnoJmC0rU8WQZLUOanxaf3ic7vbQ9+Uv7Bw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T01:38:22.213259Z"},"content_sha256":"a0780c05bd1c19750ab4a7dc1c61ad75cc106a8b6204137ce4b10ee557886ba2","schema_version":"1.0","event_id":"sha256:a0780c05bd1c19750ab4a7dc1c61ad75cc106a8b6204137ce4b10ee557886ba2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Y3UBUEWX7CEDO4PJFYSFOXVXO5/bundle.json","state_url":"https://pith.science/pith/Y3UBUEWX7CEDO4PJFYSFOXVXO5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Y3UBUEWX7CEDO4PJFYSFOXVXO5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T01:38:22Z","links":{"resolver":"https://pith.science/pith/Y3UBUEWX7CEDO4PJFYSFOXVXO5","bundle":"https://pith.science/pith/Y3UBUEWX7CEDO4PJFYSFOXVXO5/bundle.json","state":"https://pith.science/pith/Y3UBUEWX7CEDO4PJFYSFOXVXO5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Y3UBUEWX7CEDO4PJFYSFOXVXO5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:Y3UBUEWX7CEDO4PJFYSFOXVXO5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"29dc3f11cbf48f229c2ed3a1384cceb38436e285fb5564b4a9c65cdc32b126ac","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T04:33:56Z","title_canon_sha256":"7420bbcf7f6b38402c2aaa68d60083a1e55ff9ef9ecfcb207f563052cd74f898"},"schema_version":"1.0","source":{"id":"2506.01307","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.01307","created_at":"2026-07-05T11:14:11Z"},{"alias_kind":"arxiv_version","alias_value":"2506.01307v1","created_at":"2026-07-05T11:14:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.01307","created_at":"2026-07-05T11:14:11Z"},{"alias_kind":"pith_short_12","alias_value":"Y3UBUEWX7CED","created_at":"2026-07-05T11:14:11Z"},{"alias_kind":"pith_short_16","alias_value":"Y3UBUEWX7CEDO4PJ","created_at":"2026-07-05T11:14:11Z"},{"alias_kind":"pith_short_8","alias_value":"Y3UBUEWX","created_at":"2026-07-05T11:14:11Z"}],"graph_snapshots":[{"event_id":"sha256:a0780c05bd1c19750ab4a7dc1c61ad75cc106a8b6204137ce4b10ee557886ba2","target":"graph","created_at":"2026-07-05T11:14:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.01307/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Models (LLMs) have evolved into Multimodal Large Language Models (MLLMs), significantly enhancing their capabilities by integrating visual information and other types, thus aligning more closely with the nature of human intelligence, which processes a variety of data forms beyond just text. Despite advancements, the undesirable generation of these models remains a critical concern, particularly due to vulnerabilities exposed by text-based jailbreak attacks, which have represented a significant threat by challenging existing safety protocols. Motivated by the unique security risk","authors_text":"Hanwang Zhang, Jing Liu, Richang Hong, Wenbo Hu, Yinpeng Dong, Youze Wang","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T04:33:56Z","title":"Align is not Enough: Multimodal Universal Jailbreak Attack against Multimodal Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.01307","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3642504763c537bfbf87c988d2fb690956f698ee67a2afb087319aab1e857a1d","target":"record","created_at":"2026-07-05T11:14:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"29dc3f11cbf48f229c2ed3a1384cceb38436e285fb5564b4a9c65cdc32b126ac","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T04:33:56Z","title_canon_sha256":"7420bbcf7f6b38402c2aaa68d60083a1e55ff9ef9ecfcb207f563052cd74f898"},"schema_version":"1.0","source":{"id":"2506.01307","kind":"arxiv","version":1}},"canonical_sha256":"c6e81a12d7f8883771e92e24575eb77760e05158139c6718db06d1ed3dd451bb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c6e81a12d7f8883771e92e24575eb77760e05158139c6718db06d1ed3dd451bb","first_computed_at":"2026-07-05T11:14:11.471876Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:14:11.471876Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zeoP0wss9W7jobONvA3ulUgW7pz1lwxbV/nCHI88119fgRVgv5bB59iqRuZNoEsraJvl9ZobcgtKVMa4wFqyDA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:14:11.472313Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.01307","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3642504763c537bfbf87c988d2fb690956f698ee67a2afb087319aab1e857a1d","sha256:a0780c05bd1c19750ab4a7dc1c61ad75cc106a8b6204137ce4b10ee557886ba2"],"state_sha256":"a5dd5bf55376bb4c7d0db6d48f76340dcd6353cc04a7329747fac0695ca5f03d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"R0i0vY67bsUsNHfBvkHuFzO1KaE94ftO+F0evA4DVjKu0oN2pUmMdXJI8s0rlgQhgfMf9ClO5QeI2FMV2ptJCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T01:38:22.218672Z","bundle_sha256":"2a2b9b634f16a9f7103eb558965f883728ab1eb5b153d5e4e8e8be311fed5525"}}