mlsanityData to 14 Oct 2026

EVADE-Bench: Multimodal Benchmark for Evaluating and Enhancing Evasive Content Detection

arXiv 2505.17654 ↗First posted 23 May 2025cs.CL cs.AIcited by 5

On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness

Abstract (arXiv)

E-commerce platforms increasingly rely on Large Language Models (LLMs) and Vision Language Models (VLMs) to detect illicit or misleading product content. However, these models remain vulnerable to evasive content, which refers to inputs that have been deliberately modified through techniques such as word splitting, euphemistic language, or image cropping to conceal policy violations while still conveying prohibited claims. Crucially, detecting such content requires a model to simultaneously master two capabilities: accurately comprehending complex rules, and correctly inferring the true intent behind deliberately obfuscated multimodal inputs. While prior work has separately explored LLM reasoning over complex rules and LLM-based detection of evasive content, no existing benchmark combines both within a unified evaluation framework. This gap is particularly consequential in e-commerce, where accurate moderation demands that both capabilities operate in concert. To address this gap, we introduce EVADE-Bench, the first expert-curated Chinese multimodal benchmark specifically designed to evaluate LLMs and VLMs on evasive content detection in real-world e-commerce scenarios. Our comprehensive evaluation of 26 open- and closed-source LLMs and VLMs reveals that even state-of-the-art models frequently misclassify evasive samples. We further demonstrate that clearer rule categorization significantly improves model prediction consistency and reduces false predictions, highlighting the critical role of benchmark design in enabling reliable evaluation. To explore paths for performance improvement, we investigate the feasibility of multi-agent decomposition for multimodal reasoning, wherein visual description and logical inference are decoupled into separate agents, and find that this strategy yields notable accuracy gains.

Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 21 of its 37 references that are in the map. First posted on arXiv 23 May 2025.

Builds on

21 of 37 references.

Closest ancestors · 2

Same direction, newest first

  1. 2025Can't See the Forest for the Trees: Benchmarking Multimodal Safety Awareness for Multimodal LLMs16 Feb
  2. 2024A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends10 Jul

Other references · 19

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  2. 2023GPT-4 Technical Reportcited by 18,396
  3. 2025Qwen3 Technical Reportcited by 8,820
  4. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  5. 2023A Survey of Large Language Modelscited by 2,576
  6. 2023A Survey on Hallucination in Large Language Models: Principles, Taxonomy, Challenges, and Open Questionscited by 1,601
  7. 2020The Hateful Memes Challenge: Detecting Hate Speech in Multimodal Memescited by 490
  8. 2024LongVILA: Scaling Long-Context Visual Language Models for Long Videoscited by 309
  9. 2023Multimodal Foundation Models: From Specialists to General-Purpose Assistantscited by 247
  10. 2024InFoBench: Evaluating Instruction Following Ability in Large Language Modelscited by 135
  11. 2024Beyond the Limits: A Survey of Techniques to Extend the Context Length in Large Language Modelscited by 76
  12. 2024LogicBench: Towards Systematic Evaluation of Logical Reasoning Ability of Large Language Modelscited by 68
7 more
  1. 2024A Comprehensive Survey of Large Language Models and Multimodal Large Language Models in Medicinecited by 45
  2. 2025A Survey on Large Language Models with some Insights on their Capabilities and Limitationscited by 42
  3. 2024Prism: A Framework for Decoupling and Assessing the Capabilities of VLMscited by 32
  4. 2024Beyond Utility: Evaluating LLM as Recommendercited by 15
  5. 2024Investigating LLM Applications in E-Commercecited by 7
  6. 2024SWE2: SubWord Enriched and Significant Word Emphasized Framework for Hate Speech Detectioncited by 4
  7. 2024Deep Learning Approaches for Detecting Adversarial Cyberbullying and Hate Speech in Social Networkscited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 4.

5 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025OutSafe-Bench: A Benchmark for Multimodal Offensive Content Detection in Large Language Models
  2. 2026Beyond English and Evasion: A Human-Annotated Multi-Domain Benchmark for High-Stakes LLM Safety Evaluation in Chinese
  3. 2025Can Multi-modal (reasoning) LLMs detect document manipulation?
  4. 2026BEAR-Bench: A Bilingual Enterprise and Academic Reasoning Benchmark for Multimodal Models
  5. 2025ChineseHarm-Bench: A Chinese Harmful Content Detection Benchmark
  6. 2023PUMGPT: A Large Vision-Language Model for Product Understanding
  7. 2026Benchmarking Large Vision-Language Models on CFMME: A Comprehensive Chinese Financial Multimodal Evaluation Dataset
  8. 2025Debate with Images: Detecting Deceptive Behaviors in Multimodal Large Language Models