List your company
ResearchFormerly WizWand

Jailbreak Attack on JailBreakV_28K

88.32Attack Success Rate (ASR)UJEM-KL
9.269629.792350.31570.8377Mar 16, 2026Mar 25, 2026Apr 3, 2026Apr 13, 2026Apr 22, 2026May 1, 2026May 11, 2026
Updated 5mo ago

Evaluation results

MethodLinks
UJEM-KLSource Model=LLaVA-1.5, Target Model=LLaVA-1.52026.0588.32—
SEASource Model=LLaVA-1.5, Target Model=LLaVA-1.52026.0585.23—
UJEMSource Model=LLaVA-1.5, Target Model=LLaVA-1.52026.0584.33—
ForceSource Model=LLaVA-1.5, Target Model=LLaVA-1.52026.0584.02—
UJEM-KLSource Model=InternVL3.5, Target Model=InternVL3.52026.0583.67—
SEASource Model=InternVL3.5, Target Model=InternVL3.52026.0583.39—
FigStepSource Model=LLaVA-1.5, Target Model=LLaVA-1.52026.0582.28—
UJEM-KLSource Model=Qwen2.5-VL, Target Model=Qwen2.5-VL2026.0582.23—
ForceSource Model=InternVL3.5, Target Model=InternVL3.52026.0582.14—
SEASource Model=Qwen2.5-VL, Target Model=Qwen2.5-VL2026.0581.64—
UJEMSource Model=InternVL3.5, Target Model=InternVL3.52026.0581.22—
ForceSource Model=Qwen2.5-VL, Target Model=Qwen2.5-VL2026.0579.27—
FigStepSource Model=Qwen2.5-VL, Target Model=Qwen2.5-VL2026.0578.43—
UJASource Model=LLaVA-1.5, Target Model=LLaVA-1.52026.0578.06—
UJEMSource Model=Qwen2.5-VL, Target Model=Qwen2.5-VL2026.0576.41—
FigStepSource Model=InternVL3.5, Target Model=InternVL3.52026.0575.17—
UJASource Model=Qwen2.5-VL, Target Model=Qwen2.5-VL2026.0572.58—
UJASource Model=InternVL3.5, Target Model=InternVL3.52026.0570.21—
FigStepSource Model=LLaVA-1.5, Target Model=Qwen2.5-VL2026.0567.33—
UJEM-KLSource Model=LLaVA-1.5, Target Model=Qwen2.5-VL2026.0567.14—
UJEM-KLSource Model=LLaVA-1.5, Target Model=InternVL3.52026.0562.44—
UJEM-KLSource Model=InternVL3.5, Target Model=LLaVA-1.52026.0560.77—
Baseline2026.0358.9779.1
UJEMSource Model=LLaVA-1.5, Target Model=Qwen2.5-VL2026.0557.16—
UJEM-KLSource Model=Qwen2.5-VL, Target Model=LLaVA-1.52026.0556.63—
FigStepSource Model=Qwen2.5-VL, Target Model=LLaVA-1.52026.0554.4—
UJEMSource Model=LLaVA-1.5, Target Model=InternVL3.52026.0554.34—
FigStepSource Model=LLaVA-1.5, Target Model=InternVL3.52026.0552.94—
UJEMSource Model=InternVL3.5, Target Model=LLaVA-1.52026.0552.61—
SEASource Model=LLaVA-1.5, Target Model=Qwen2.5-VL2026.0548.86—
UJEM-KLSource Model=Qwen2.5-VL, Target Model=InternVL3.52026.0548.62—
UJEMSource Model=Qwen2.5-VL, Target Model=LLaVA-1.52026.0548.5—
ForceSource Model=LLaVA-1.5, Target Model=Qwen2.5-VL2026.0547.29—
FigStepSource Model=InternVL3.5, Target Model=LLaVA-1.52026.0546.89—
Post-hoc Safety Filtering2026.0345.1372.7
UJEM-KLSource Model=InternVL3.5, Target Model=Qwen2.5-VL2026.0544.94—
SEASource Model=LLaVA-1.5, Target Model=InternVL3.52026.0544.1—
SEASource Model=Qwen2.5-VL, Target Model=LLaVA-1.52026.0544.03—
UJASource Model=LLaVA-1.5, Target Model=Qwen2.5-VL2026.0543.95—
FigStepSource Model=Qwen2.5-VL, Target Model=InternVL3.52026.0543.82—
SEASource Model=InternVL3.5, Target Model=LLaVA-1.52026.0543.76—
ForceSource Model=LLaVA-1.5, Target Model=InternVL3.52026.0543.02—
ForceSource Model=InternVL3.5, Target Model=LLaVA-1.52026.0542.73—
ForceSource Model=Qwen2.5-VL, Target Model=LLaVA-1.52026.0541.47—
FigStepSource Model=InternVL3.5, Target Model=Qwen2.5-VL2026.0541.38—
UJEMSource Model=Qwen2.5-VL, Target Model=InternVL3.52026.0540.64—
UJEMSource Model=InternVL3.5, Target Model=Qwen2.5-VL2026.0540.27—
UJASource Model=LLaVA-1.5, Target Model=InternVL3.52026.0538.67—
UJASource Model=Qwen2.5-VL, Target Model=LLaVA-1.52026.0538.35—
SEASource Model=Qwen2.5-VL, Target Model=InternVL3.52026.0535.24—
UJASource Model=InternVL3.5, Target Model=LLaVA-1.52026.0534.42—
SEASource Model=InternVL3.5, Target Model=Qwen2.5-VL2026.0533.42—
ForceSource Model=Qwen2.5-VL, Target Model=InternVL3.52026.0533.16—
ForceSource Model=InternVL3.5, Target Model=Qwen2.5-VL2026.0531.62—
UJASource Model=Qwen2.5-VL, Target Model=InternVL3.52026.0529.08—
UJASource Model=InternVL3.5, Target Model=Qwen2.5-VL2026.0526.05—
SFCoT2026.0312.31—