# Multimodal memory poisoning attack on ReAct Source: [Multimodal memory poisoning attack on ReAct]() Collection index: [llms.txt]() Data updated: 2026-06-11T08:35:41.071Z Evaluation of model susceptibility to Multimodal memory poisoning attacks using the ReAct dataset, measured by Attack Success Rate variants (ASR-r, ASR-a, ASR-ra). A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Multimodal memory poisoning attack | | Dataset (including any stated split) | ReAct | | Metric | ASR-r | | Unit | PERCENT | | Direction | Higher is better | | Results loaded | 8 of 8 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [ASR-r](): Higher is better; unit: PERCENT. - [ASR-a](): Higher is better; unit: PERCENT. - [ASR-ra](): Higher is better; unit: PERCENT. ## Recorded results | Method | ASR-r | Result date | Report paper | | --- | --- | --- | --- | | AgentPoison | 98.49 | Not recorded | 6a28f37790966ade919c19a9 | | MemVenom | 97.32 | Not recorded | 6a28f37790966ade919c19a9 | | AgentPoison | 96.31 | Not recorded | 6a28f37790966ade919c19a9 | | MemVenom | 94.84 | Not recorded | 6a28f37790966ade919c19a9 | | CPA | 69.28 | Not recorded | 6a28f37790966ade919c19a9 | | CPA | 52.58 | Not recorded | 6a28f37790966ade919c19a9 | | BadChain | 20.69 | Not recorded | 6a28f37790966ade919c19a9 | | BadChain | 16.93 | Not recorded | 6a28f37790966ade919c19a9 | ### AgentPoison ASR-r: 98.49. Result ID: 6a2a7238fbc373592c278a5e. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Backbone":"Qwen3-VL-PLUS"}. This record does not assert independent reproduction. ### MemVenom ASR-r: 97.32. Result ID: 6a2a7238fbc373592c278a5d. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"Qwen3-VL-8B-Instruct"}. This record does not assert independent reproduction. ### AgentPoison ASR-r: 96.31. Result ID: 6a2a7238fbc373592c278a5a. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Backbone":"Qwen3-VL-8B-Instruct"}. This record does not assert independent reproduction. ### MemVenom ASR-r: 94.84. Result ID: 6a2a7238fbc373592c278a61. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"Qwen3-VL-PLUS"}. This record does not assert independent reproduction. ### CPA ASR-r: 69.28. Result ID: 6a2a7238fbc373592c278a5b. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"Qwen3-VL-8B-Instruct"}. This record does not assert independent reproduction. ### CPA ASR-r: 52.58. Result ID: 6a2a7238fbc373592c278a5f. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"Qwen3-VL-PLUS"}. This record does not assert independent reproduction. ### BadChain ASR-r: 20.69. Result ID: 6a2a7238fbc373592c278a60. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"Qwen3-VL-PLUS"}. This record does not assert independent reproduction. ### BadChain ASR-r: 16.93. Result ID: 6a2a7238fbc373592c278a5c. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"Qwen3-VL-8B-Instruct"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.