Visual Adversarial Examples Jailbreak Aligned Large Language Models

Key findings

• A single adversarial image universally jailbreaks MiniGPT-4 to produce harmful content across topics - Visual attacks are easier than text attacks because the input space is continuous

Sources

• arxiv.orghttps://arxiv.org/abs/2306.13213