Signal2026-08-12
arXiv

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs

Part of

Self-Driving Car Security Evaluation