mlsanityData to 7 Oct 2026

VLSA: Vision-Language-Action Models with Plug-and-Play Safety Constraint Layer

arXiv 2512.11891 ↗First posted 9 Dec 2025cs.RO cs.SY eess.SYcited by 32

On the map: Vision-language-action models → Safety and adversarial attacks

Abstract (arXiv)

Vision-Language-Action (VLA) models have demonstrated remarkable capabilities in generalizing across diverse robotic manipulation tasks. However, deploying these models in unstructured environments remains challenging due to the critical need for simultaneous task compliance and safety assurance, particularly in preventing potential collisions during physical interactions. In this work, we introduce a Vision-Language-Safe Action (VLSA) architecture, named AEGIS, which contains a plug-and-play safety constraint (SC) layer formulated via control barrier functions. AEGIS integrates directly with existing VLA models to improve safety with theoretical guarantees, while maintaining their original instruction-following performance. To evaluate the efficacy of our architecture, we construct a comprehensive safety-critical benchmark SafeLIBERO, spanning distinct manipulation scenarios characterized by varying degrees of spatial complexity and obstacle intervention. Extensive experiments demonstrate the superiority of our method over state-of-the-art baselines. Notably, AEGIS achieves over 50% improvement in obstacle avoidance rate while substantially increasing the task success rate by nearly 10%. All benchmark datasets, code, and supplementary materials are publicly available at https://vlsa-aegis.github.io/.

Key facts. Cited by 32 papers in the map (data through 7 Oct 2026). Placed in Safety and adversarial attacks, one of 13 directions in Vision-language-action models. Builds on 46 of its 64 references that are in the map. First posted on arXiv 9 Dec 2025.

Builds on

46 of 64 references.

Closest ancestors · 2

Same direction, newest first

  1. 2025When Alignment Fails: Multimodal Adversarial Attacks on Vision-Language-Action Models20 Nov
  2. 2025SafeVLA: Towards Safety Alignment of Vision-Language-Action Model via Constrained Learning5 Mar

Other references · 44

  1. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
  2. 2023Grounding DINO: Marrying DINO with Grounded Pre-Training for Open-Set Object Detectioncited by 3,274
  3. 2023RT-2: Vision-Language-Action Models Transfer Web Knowledge to Robotic Controlcited by 2,993
  4. 2024OpenVLA: An Open-Source Vision-Language-Action Modelcited by 2,777
  5. 2024π0: A Vision-Language-Action Flow Model for General Robot Controlcited by 2,297
  6. 2025π0.5: a Vision-Language-Action Model with Open-World Generalizationcited by 1,653
  7. 2023LIBERO: Benchmarking Knowledge Transfer for Lifelong Robot Learningcited by 1,338
  8. 2024ChatGLM: A Family of Large Language Models from GLM-130B to GLM-4 All Toolscited by 1,096
  9. 2025Fine-Tuning Vision-Language-Action Models: Optimizing Speed and Successcited by 844
  10. 2024DROID: A Large-Scale In-The-Wild Robot Manipulation Datasetcited by 801
  11. 2025SmolVLA: A Vision-Language-Action Model for Affordable and Efficient Roboticscited by 507
  12. 2020robosuite: A Modular Simulation Framework and Benchmark for Robot Learningcited by 484
32 more
  1. 2025WorldVLA: Towards Autoregressive Action World Modelcited by 351
  2. 2021Safe Learning in Robotics: From Learning-Based Control to Safe Reinforcement Learningcited by 337
  3. 2019Control Barrier Functions: Theory and Applicationscited by 332
  4. 2024TinyVLA: Towards Fast, Data-Efficient Vision-Language-Action Models for Robotic Manipulationcited by 331
  5. 20243D-VLA: A 3D Vision-Language-Action Generative World Modelcited by 320
  6. 2024A Survey on Vision-Language-Action Models for Embodied AIcited by 274
  7. 2016Control Barrier Function Based Quadratic Programs for Safety Critical Systemscited by 261
  8. 2025VLA-Adapter: An Effective Paradigm for Tiny-Scale Vision-Language-Action Modelcited by 140
  9. 2025ChatVLA: Unified Multimodal Understanding and Robot Control with Vision-Language-Action Modelcited by 112
  10. 2025A Survey on Vision-Language-Action Models: An Action Tokenization Perspectivecited by 96
  11. 2025Vision-Language-Action Models for Robotics: A Review Towards Real-World Applicationscited by 82
  12. 2025A Survey on Vision-Language-Action Models for Autonomous Drivingcited by 72
  13. 2025Evo-0: Vision-Language-Action Model with Implicit Spatial Understandingcited by 55
  14. 2022Enforcing Hard Constraints with Soft Barriers: Safe Reinforcement Learning in Unknown Stochastic Environmentscited by 54
  15. 2025Pure Vision Language Action (VLA) Models: A Comprehensive Surveycited by 46
  16. 2025Vision Language Action Models in Robotic Manipulation: A Systematic Reviewcited by 38
  17. 2020Synthesis of Control Barrier Functions Using a Supervised Machine Learning Approachcited by 35
  18. 2025A Survey on Efficient Vision-Language-Action Modelscited by 34
  19. 2020Learning with Safety Constraints: Sample Complexity of Reinforcement Learning for Constrained MDPscited by 32
  20. 2025Efficient Vision-Language-Action Models for Embodied Manipulation: A Systematic Surveycited by 25
  21. 2020Multi-Layered Safety for Legged Robots via Control Barrier Functions and Model Predictive Controlcited by 20
  22. 2025GraphCoT-VLA: A 3D Spatial-Aware Reasoning Vision-Language-Action Model for Robotic Manipulation with Ambiguous Instructionscited by 19
  23. 2025Improving Pre-Trained Vision-Language-Action Policies with Model-Based Searchcited by 12
  24. 2019Control Barrier Functions for Mechanical Systems: Theory and Application to Robotic Graspingcited by 8
  25. 2020Comparative Analysis of Control Barrier Functions and Artificial Potential Fields for Obstacle Avoidancecited by 8
  26. 2025HyperVLA: Efficient Inference in Vision-Language-Action Models via Hypernetworkscited by 6
  27. 2023Real-time Safety Assessment of Dynamic Systems in Non-stationary Environments: A Review of Methods and Techniquescited by 4
  28. 2023Collision Avoidance for Ellipsoidal Rigid Bodies with Control Barrier Functions Designed from Rotating Supporting Hyperplanescited by 2
  29. 2024Safety on the Fly: Constructing Robust Safety Filters via Policy Control Barrier Functions at Runtimecited by 2
  30. 2025PB-OEL: A Performance-Bounded Online Ensemble Learning Framework With Mixed Feedback for Real-Time Safety Assessmentcited by 2
  31. 2024Safety-Critical Planning and Control for Dynamic Obstacle Avoidance Using Control Barrier Functionscited by 1
  32. 2025Learning-based Adaptive Safety-Critical Control With Evolving Unsafe Regionscited by 1

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 32.

32 papers.

Sort:

By area:

  1. 2026LIBERO-X: Robustness Litmus for Vision-Language-Action Modelscited by 17
  2. 2026Vision-Language-Action Safety: Threats, Challenges, Evaluations, and Mechanismscited by 12
  3. 2026SafeVLA-Bench: A Benchmark for the Success-Safety Gap in Vision-Language-Action Modelscited by 8
  4. 2026LIBERO-Safety: A Comprehensive Benchmark for Physical and Semantic Safety in Vision-Language-Action Modelscited by 8
  5. 2026OmniGuide: Universal Guidance Fields for Enhancing Generalist Robot Policiescited by 6
  6. 2026HazardArena: Evaluating Semantic Safety in Vision-Language-Action Modelscited by 6
  7. 2026Neuro-Symbolic Safety Guidance for Vision-Language-Action Models via Constrained Flow Matchingcited by 4
  8. 2026LABSHIELD: A Multimodal Benchmark for Safety-Critical Reasoning and Planning in Scientific Laboratoriescited by 3
  9. 2026BeSafe-Bench: Unveiling Behavioral Safety Risks of Situated Agents in Functional Environmentscited by 3
  10. 2026How VLAs (Really) Work In Open-World Environmentscited by 3
  11. 2026Your Model Already Knows: Attention-Guided Safety Filter for Vision-Language-Action Modelscited by 3
  12. 2026SafeDojo: Safe Reinforcement Learning for VLA via Interactive World Modelcited by 2
20 more
  1. 2026ActFovea: Runtime Safeguarding for VLA Policies via Spatiotemporal Visual-Action Consistencycited by 2
  2. 2026Safe Vision Language Action Models via Barrier Enhanced Flow Matchingcited by 2
  3. 2026Multimodal Benchmark for Safety Assessment in Industrial Inspection Scenarioscited by 1
  4. 2026DreamAvoid: Critical-Phase Test-Time Dreaming to Avoid Failures in VLA Policiescited by 1
  5. 2026Towards General Language-Conditioned Latent Safety Filterscited by 1
  6. 2026hint2: Hierarchical World Models for Inference-Time Temporal Logic Guidancecited by 1
  7. 2026Can Explicit Physical Feasibility Benefit VLA Learning? An Empirical Studycited by 0
  8. 2026RedVLA: Physical Red Teaming for Vision-Language-Action Modelscited by 0
  9. 2026How VLAs Fail Differently: Black-Box Action Monitoring Reveals Architecture-Specific Failure Signaturescited by 0
  10. 2026VLESA: Vision-Language Embodied Safety Agent for Human Activity Monitoringcited by 0
  11. 2026LAGO Policy: Latency-Aware Asynchronous Diffusion Policies with Goal-Directed Collision-Free Planning for Smooth Manipulationcited by 0
  12. 2026Security of Foundation-Model-Powered Embodied Agents: Attack Surfaces, Attacks, Defenses, and Evaluationcited by 0
  13. 2026Logic-VLA: A Temporal Logic Conditioned Vision-Language-Action Modelcited by 0
  14. 2026Coding Agents with an Obstacle-Aware Harness for Safe Robot Manipulationcited by 0
  15. 2026VLPSA: Vision-Language-Poisson-Safe Actions for Full-Body Safety of Learned Policiescited by 0
  16. 2026SafeLoop: Risk-Aware Rollback for Vision-Language-Action Manipulationcited by 0
  17. 2026Security and Privacy in Large-Model-Driven Embodied Agents: Attacks, Defenses, and Future Directionscited by 0
  18. 2026Learning from Runtime Feedback through Failure-Bank Self-Evolution for Vision-Language-Action Modelscited by 0
  19. 2026Multi-Link Safety Filtering for VLA Policies Around Moving Hazardscited by 0
  20. 2026WBAG: A Whole-Body and Attached-Geometry Safety Framework for Vision-Language-Action Manipulationcited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2026ShieldVLA: Feasibility-Aware Safety Alignment for Vision-Language-Action Models
  2. 2026SimVLA: A Simple VLA Baseline for Robotic Manipulation
  3. 2024What Matters in Building Vision-Language-Action Models for Generalist Robots
  4. 2026ForesightSafety-VLA: A Unified Diagnostic Safety Benchmark for Vision-Language-Action Models
  5. 2025Eva-VLA: Evaluating Vision-Language-Action Models' Robustness Under Real-World Physical Variations
  6. 2024Benchmarking Vision, Language, & Action Models on Robotic Learning Tasks
  7. 2025VLA-Arena: An Open-Source Framework for Benchmarking Vision-Language-Action Models
  8. 2025An Anatomy of Vision-Language-Action Models: From Modules to Milestones and Challenges