Jailbreak Attack on SPA-VL Help
6.42ASROriginal
Evaluation Results
| Method | Links | |
|---|---|---|
| Originalmode=baseline2026.01 | 6.42 | |
| Only Image Noisingstrategy=Adversarial image noising2026.01 | 10.19 | |
| Static Rewritingstrategy=Static template rewriting2026.01 | 21.89 | |
| ReAct-driven adaptive noising mechanismmode=ReAct & Noise2026.01 | 32.83 | |
| ReAct Dynamic Prompt Rewritingmode=Only ReAct Rewriting2026.01 | 35.09 |