{
  "schema_version": 1,
  "title": "Repro - When the Prompt Becomes Visual: Vision-Centric Jailbreak Attacks for Large Image Editing Models",
  "emoji": "\ud83d\udd2c",
  "space_id": "bertfil/wQxRphkfxn",
  "paper": {
    "arxiv_id": "2602.10179",
    "openreview_id": "wQxRphkfxn",
    "title": "When the Prompt Becomes Visual: Vision-Centric Jailbreak Attacks for Large Image Editing Models",
    "url": "https://arxiv.org/abs/2602.10179"
  },
  "tags": [
    "icml2026-repro",
    "paper-wQxRphkfxn"
  ],
  "updated_at": "2026-07-20T03:52:41+00:00",
  "root": {
    "slug": "index",
    "title": "Repro - When the Prompt Becomes Visual: Vision-Centric Jailbreak Attacks for Large Image Editing Models",
    "file": "pages/index.md",
    "children": [
      {
        "slug": "00-scored-evidence-summary",
        "title": "00 - Scored evidence summary",
        "file": "pages/00-scored-evidence-summary/page.md",
        "children": []
      },
      {
        "slug": "claim-1-vja-vision-centric-jailbreak-attack-achieves-an-ov",
        "title": "Claim 1 - VJA (Vision-centric Jailbreak Attack) achieves an overall at\u2026",
        "file": "pages/claim-1-vja-vision-centric-jailbreak-attack-achieves-an-ov/page.md",
        "children": []
      },
      {
        "slug": "claim-2-vja-reaches-97-5-asr-on-qwen-image-edit-and-94-1-a",
        "title": "Claim 2 - VJA reaches 97.5% ASR on Qwen-Image-Edit and 94.1% ASR on Se\u2026",
        "file": "pages/claim-2-vja-reaches-97-5-asr-on-qwen-image-edit-and-94-1-a/page.md",
        "children": []
      },
      {
        "slug": "claim-3-a-training-free-defense-based-on-introspective-mul",
        "title": "Claim 3 - A training-free defense based on introspective multimodal re\u2026",
        "file": "pages/claim-3-a-training-free-defense-based-on-introspective-mul/page.md",
        "children": []
      },
      {
        "slug": "claim-4-the-defense-suppresses-high-risk-generations-most",
        "title": "Claim 4 - The defense suppresses high-risk generations most in categor\u2026",
        "file": "pages/claim-4-the-defense-suppresses-high-risk-generations-most/page.md",
        "children": []
      },
      {
        "slug": "claim-5-the-introspective-defense-adds-only-about-170-inpu",
        "title": "Claim 5 - The introspective defense adds only about 170 input and 110 \u2026",
        "file": "pages/claim-5-the-introspective-defense-adds-only-about-170-inpu/page.md",
        "children": []
      },
      {
        "slug": "reproduction-protocol-and-provenance",
        "title": "Reproduction protocol and provenance",
        "file": "pages/reproduction-protocol-and-provenance/page.md",
        "children": []
      },
      {
        "slug": "conclusion",
        "title": "Conclusion",
        "file": "pages/conclusion/page.md",
        "children": []
      }
    ]
  },
  "agent_view_tokens": 7793,
  "revision": "1784519561110346600"
}