Preprint
Jul 2026
TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models
This paper introduces the concept of instruction-dense visual jailbreaks, in which image-generation models produce detailed, readable, and actionable harmful instructions within images, and proposes TYPO, a black-box framework that exploits this safety gap by automatically generating adversarial TYPOgraphy prompts.
Meng Xie, Li Zeng, Hang Zhang et al.
· 0 citations