ResearchBenchmarksJailbreak Attack on VLM Jailbreak Dataset Target: Gemini 2.5 ProFollow91Attack Success Rate (ASR)Salami33.848.6563.578.35Apr 13, 2026Evaluation ResultsMethodMethodLinksAttack Success Rate (ASR)Percentage Point DropSalamiOptimization Source=GP...Optimization Source=GPT-4o, Shots=52026.0491—A-SalamiOptimization Source=GP...Optimization Source=GPT-4o2026.048313CrescendoOptimization Source=GP...Optimization Source=GPT-4o2026.043624