Multimodal memory poisoning attack on ReAct
98.49ASR-rAgentPoison
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| AgentPoisonBackbone=Qwen3-VL-PLUS2026.06 | 98.49 | 88.24 | 86.91 | |
| MemVenomBackbone=Qwen3-VL-8B-Instruct2026.06 | 97.32 | 82.35 | 80.15 | |
| AgentPoisonBackbone=Qwen3-VL-8B-Instruct2026.06 | 96.31 | 70.59 | 67.99 | |
| MemVenomBackbone=Qwen3-VL-PLUS2026.06 | 94.84 | 94.12 | 89.26 | |
| CPABackbone=Qwen3-VL-8B-Instruct2026.06 | 69.28 | 54.9 | 38.03 | |
| CPABackbone=Qwen3-VL-PLUS2026.06 | 52.58 | 76.47 | 40.21 | |
| BadChainBackbone=Qwen3-VL-PLUS2026.06 | 20.69 | 58.82 | 12.17 | |
| BadChainBackbone=Qwen3-VL-8B-Instruct2026.06 | 16.93 | 47.06 | 7.97 |