{"data":{"id":"37e59c23-b3c5-492f-9c04-729caba60d59","title":"Enhancing Visual Task-Redirection Attacks on Vision-Language-Action Models via Closed-Loop Optimization","summary":"Researchers show that visual perturbations can redirect vision-language-action robot models away from the user's intended task. Prior attacks used fixed target supervision, which stops matching the states the attacked robot actually reaches. The proposed TRACO framework rebuilds supervision from the states reached under attack and focuses updates where task progress stalls, improving task-redirection success across VLA models and simulation environments.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2610.23566v1","publishedAt":"2026-10-16T14:51:44.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["model_evasion"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Vision-language-action (VLA) models"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-16T14:51:44.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity","safety"],"aiComponentTargeted":"model","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":null}}