Jailbreaking on HarmBench Visual Cipher
90.6ASR (K=1)Gemini 3 Flash
Evaluation results
| Method | Links | ||
|---|---|---|---|
| Gemini 3 Flash2026.05 | 90.6 | 97.5 | |
| Qwen3-VL-235B2026.05 | 62.9 | 86.2 | |
| Qwen3-VL-32B2026.05 | 62.3 | 87.4 | |
| Claude Haiku 4.52026.05 | 15.1 | 40.9 | |
| Gemini 3.1 Pro2026.05 | 8.2 | 14.5 | |
| GPT-5.22026.05 | 3.8 | 8.2 |