{"data":{"id":"2e0b70c0-980c-41e0-b249-7b59a3babde1","title":"Not an Accident: Exploiting Safety Filter Inadequacy in Humanoid Robots","summary":"This paper shows that safety filters on humanoid robots guarantee collision avoidance only when their safety parameters are configured correctly, and that no general method exists to set them across deployments. The authors present goal insertion attacks, which use normal user interactions without extra privileges, and build SIREN, an automated tool that identifies vulnerable goals for a given task and environment. SIREN finds attacks in all vulnerable scenarios in the SPARK dataset, discovers three times as many as a baseline approach, and causes a real humanoid to collide while executing tasks.","solution":"N/A -- no mitigation discussed in source.","labels":["security","safety"],"sourceUrl":"https://arxiv.org/abs/2610.31923v1","publishedAt":"2026-10-22T21:16:46.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"low","attackType":["other"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["humanoid robots","SIREN","SPARK dataset"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-22T21:16:46.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["safety"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":"preprint","atlasIds":null}}