BadVLA: Towards Backdoor Attacks on Vision-Language-Action Models via Objective-Decoupled Optimization
Xueyang Zhou, Guiyao Tie, Guowen Zhang, Hechang Wang, Pan Zhou, Lichao Sun · 2025
Read BadVLA: Towards Backdoor Attacks on Vision-Language-Action Models via Objective-Decoupled Optimization by Xueyang Zhou, Guiyao Tie, Guowen Zhang, Hechang Wang, Pan Zhou, Lichao Sun (2025) in the Tower of Babel, a free online library of public-domain works preserved in clean, searchable text. No sign-up. The full text is served as a plain-text file at a predictable URL, where text is present: https://antarctic-labs.com/tower-of-babel/arxiv-2505-16640.txt.
Description
Xueyang Zhou and co-authors plant a hidden backdoor in robot control models in a 2025 paper. Vision language action models steer robots from camera and text input. A backdoor makes a model misbehave only when a secret trigger appears. Such attacks stay hidden during normal use, which makes them hard to catch.
Their method first pulls trigger features apart from clean ones in model space. It then ties wrong control moves to the trigger alone. Clean task scores stay near normal, while attack success nears total. The trick survives noise, task shifts, and fine tuning. The authors warn that robot models need security checks before real deployment.
Catalog record
| CREATOR | Xueyang Zhou, Guiyao Tie, Guowen Zhang, Hechang Wang, Pan Zhou, Lichao Sun |
|---|---|
| YEAR | 2025 |
| COLLECTION | PAPERS |
| FORMAT | TXT |
| FILE SIZE | 42 KB |
| VERSION | 1.0 |
| LICENSE | http://creativecommons.org/licenses/by/4.0/ |
| RIGHTS | CC BY |
| SOURCE | arXiv |
Source: https://arxiv.org/abs/2505-16640