Hao-Yue Feng

Black-Box Adversarial Patch Attacks on VLAs via Ancestor VLM Exploitation

Vision-Language-Action models (VLAs) are increasingly deployed in safety-critical physical environments, yet their adversarial robustness remains poorly understood. Existing attacks typically assume white-box access or rely on surrogate VLAs, which rarely holds in real-world deployments. Our key insight is that most VL...