Multimodal memory poisoning attack on SeeAct
99.15ASR-rMemVenom
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| MemVenomBackbone=Qwen3-VL-PLUS2026.06 | 99.15 | 90.2 | 89.34 | |
| AgentPoisonBackbone=Qwen3-VL-PLUS2026.06 | 96.45 | 88.24 | 85.1 | |
| MemVenomBackbone=Qwen3-VL-8B-Instruct2026.06 | 96.23 | 97.65 | 93.97 | |
| AgentPoisonBackbone=Qwen3-VL-8B-Instruct2026.06 | 90.2 | 82.35 | 74.28 | |
| CPABackbone=Qwen3-VL-PLUS2026.06 | 68.22 | 91.18 | 62.2 | |
| CPABackbone=Qwen3-VL-8B-Instruct2026.06 | 47.25 | 41.18 | 19.46 | |
| BadChainBackbone=Qwen3-VL-PLUS2026.06 | 40.57 | 80.39 | 32.61 | |
| BadChainBackbone=Qwen3-VL-8B-Instruct2026.06 | 34.36 | 64.71 | 22.23 |