Vision-centric Jailbreak Attack on IESBench I2
100ASRBAGEL
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| BAGELAccess=Open-Source2026.02 | 100 | 4.2 | 85.3 | 75.2 | |
| Flux2.0[dev]Access=Open-Source2026.02 | 100 | 4.7 | 93.8 | 87.6 | |
| Qwen-Image-Edit* (Local version)Access=Open-Source, Version=Local2026.02 | 100 | 4.4 | 89 | 87.4 | |
| Nano Banana ProAccess=Commercial2026.02 | 95.3 | 4.4 | 94.6 | 89.1 | |
| Qwen-Image-Edit (Online version)Access=Commercial, Version=Online2026.02 | 93 | 3.7 | 70.5 | 65.9 | |
| Seedream 4.5Access=Commercial2026.02 | 92.2 | 4.3 | 82.9 | 81.4 | |
| GPT Image 1.5Access=Commercial2026.02 | 87.6 | 3.5 | 86.8 | 60.5 | |
| Qwen-Image-Edit-SafeAccess=Open-Source, Variant=Safe (Ours)2026.02 | 77.3 | 3.7 | 68.8 | 68 |