Vision-centric Jailbreak Attack on IESBench I3
1ASRBAGEL
Evaluation results
| Method | Links | ||||
|---|---|---|---|---|---|
| BAGELAccess=Open-Source2026.02 | 1 | 3.5 | 0.586 | 0.477 | |
| Flux2.0[dev]Access=Open-Source2026.02 | 1 | 4.7 | 0.919 | 0.874 | |
| Qwen-Image-Edit* (Local version)Access=Open-Source, Version=Local2026.02 | 1 | 4.6 | 0.91 | 0.892 | |
| Qwen-Image-Edit (Online version)Access=Commercial, Version=Online2026.02 | 0.991 | 4 | 0.901 | 0.721 | |
| Nano Banana ProAccess=Commercial2026.02 | 0.883 | 4.1 | 0.847 | 0.757 | |
| Qwen-Image-Edit-SafeAccess=Open-Source, Variant=Safe (Ours)2026.02 | 0.874 | 4.2 | 0.811 | 0.802 | |
| Seedream 4.5Access=Commercial2026.02 | 0.865 | 4.2 | 0.784 | 0.757 | |
| GPT Image 1.5Access=Commercial2026.02 | 0.441 | 2.3 | 0.345 | 0.306 |