{"data":{"id":"ae23d06d-81e1-4862-bece-7516fdaff75c","title":"PASA-KV: Attacking Action-Facing Visual Routes in World Action Models","summary":"The paper studies adversarial perturbations to the internal visual representations of world action models (WAMs), which couple visual or world representations with action generation. It finds that attack effectiveness varies sharply across visual K/V routes and that larger representation displacement does not reliably imply stronger control failure, attributing this to the action-conditioned readout. The authors introduce Tail-AV, a short-probe signal for identifying vulnerable routes, and PASA-KV, which selects action-facing K/V targets before training a fresh task-shared attack.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2610.39816v1","publishedAt":"2026-10-29T10:58:54.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["model_evasion"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["world action models (WAMs)"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-29T10:58:54.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity","safety"],"aiComponentTargeted":"model","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":"preprint","atlasIds":null}}