Visually Prompted Benchmarks Are Surprisingly Fragile
Not on the map. Why?
Abstract (arXiv)
A key challenge in evaluating VLMs is testing models' ability to analyze visual content independently from their textual priors. Recent benchmarks such as BLINK probe visual perception through visual prompting, where questions about visual content are paired with coordinates to which the question refers, with the coordinates explicitly marked in the image itself. While these benchmarks are an important part of VLM evaluation, we find that existing models are surprisingly fragile to seemingly irrelevant details of visual prompting: simply changing a visual marker from red to blue can completely change rankings among models on a leaderboard. By evaluating nine commonly-used open- and closed-source VLMs on two visually prompted tasks, we demonstrate how details in benchmark setup, including visual marker design and dataset size, have a significant influence on model performance and leaderboard rankings. These effects can even be exploited to lift weaker models above stronger ones; for instance, slightly increasing the size of the visual marker results in open-source InternVL3-8B ranking alongside or better than much larger proprietary models like Gemini 2.5 Pro. We further show that low-level inference choices that are often ignored in benchmarking, such as JPEG compression levels in API calls, can also cause model lineup changes. These details have substantially larger impacts on visually prompted benchmarks than on conventional semantic VLM evaluations. To mitigate this instability, we curate existing datasets to create VPBench, a larger visually prompted benchmark with 16 visual marker variants. We open-source VPBench and our analysis framework at: https://lisadunlap.github.io/vpbench/.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Builds on 27 of its 32 references that are in the map. First posted on arXiv 19 Dec 2025.
Builds on
27 of 32 references.
References · 27
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
- 2016Visual Genome: Connecting Language and Vision Using Crowdsourced Dense Image Annotationscited by 2,656
- 2023MMMU: A Massive Multi-discipline Multimodal Understanding and Reasoning Benchmark for Expert AGIcited by 2,080
- 2023MME: A Comprehensive Evaluation Benchmark for Multimodal Large Language Modelscited by 1,652
- 2016CLEVR: A Diagnostic Dataset for Compositional Language and Elementary Visual Reasoningcited by 1,457
- 2024Depth Anything V2cited by 1,422
- 2023Quantifying Language Models' Sensitivity to Spurious Features in Prompt Design or: How I learned to start worrying about prompt formattingcited by 817
- 2024SpatialVLM: Endowing Vision-Language Models with Spatial Reasoning Capabilitiescited by 706
- 2024BLINK: Multimodal Large Language Models Can See but Not Perceivecited by 550
- 2024From Crowdsourced Data to High-Quality Benchmarks: Arena-Hard and BenchBuilder Pipelinecited by 500
- 2018A Corpus for Reasoning About Natural Language Grounded in Photographscited by 459
- 2015Visual7W: Grounded Question Answering in Imagescited by 318
15 more
- 2024SpatialRGPT: Grounded Spatial Reasoning in Vision Language Modelscited by 311
- 2023What's "up" with vision-language models? Investigating their struggle with spatial reasoningcited by 254
- 2023What does CLIP know about a red circle? Visual prompt engineering for VLMscited by 218
- 2019SPair-71k: A Large-scale Benchmark for Semantic Correspondencecited by 146
- 2024DynaMath: A Dynamic Visual Benchmark for Evaluating Mathematical Reasoning Robustness of Vision Language Modelscited by 146
- 2024When Benchmarks are Targets: Revealing the Sensitivity of Large Language Model Leaderboardscited by 137
- 2024Is A Picture Worth A Thousand Words? Delving Into Spatial Reasoning for Vision Language Modelscited by 113
- 2024Perception Tokens Enhance Visual Reasoning in Multimodal Language Modelscited by 71
- 2025The Leaderboard Illusioncited by 66
- 2024Quantifying Variance in Evaluation Benchmarkscited by 54
- 2025InternSpatial: A Comprehensive Dataset for Spatial Reasoning in Vision-Language Modelscited by 28
- 2024MVTamperBench: Evaluating Robustness of Vision-Language Modelscited by 11
- 2023RoCOCO: Robustness Benchmark of MS-COCO to Stress-test Image-Text Matching Modelscited by 7
- 2025Unveiling the Lack of LVLM Robustness to Fundamental Visual Variations: Why and Path Forwardcited by 7
- 2025On the Reliability of Vision-Language Models Under Adversarial Frequency-Domain Perturbationscited by 2
Built on by
Citing papers per year: 2026: 7.
7 papers.
- 2026When the Prompt Becomes Visual: Vision-Centric Jailbreak Attacks for Large Image Editing Modelscited by 2
- 2026VPA-Guard: Defending and Benchmarking Image-to-Video Generation Against Visual Prompt Attackscited by 1
- 2026Semantic Richness or Geometric Reasoning? The Fragility of VLM's Visual Invariancecited by 0
- 2026The Cost of Language: Centroid Erasure Exposes and Exploits Modal Competition in Multimodal Language Modelscited by 0
- 2026Compositionality Emerges in a Narrow Depth-Connectivity Regime: Architecture Constraints and Solution Manifoldscited by 0
- 2026Multimodal Thinking with Renderable Programscited by 0
- 2026SLVR: Structured Latent Visual Reasoning via Human-like Reasoning Flowscited by 0
- 2026SLVR: Structured Latent Visual Reasoning via Human-like Reasoning Flows1 Oct 2026
- 2026Multimodal Thinking with Renderable Programs24 Sep 2026
- 2026VPA-Guard: Defending and Benchmarking Image-to-Video Generation Against Visual Prompt Attacks24 Jun 2026
- 2026Compositionality Emerges in a Narrow Depth-Connectivity Regime: Architecture Constraints and Solution Manifolds18 Jun 2026
- 2026The Cost of Language: Centroid Erasure Exposes and Exploits Modal Competition in Multimodal Language Models15 Apr 2026
- 2026Semantic Richness or Geometric Reasoning? The Fragility of VLM's Visual Invariance2 Apr 2026
- 2026When the Prompt Becomes Visual: Vision-Centric Jailbreak Attacks for Large Image Editing Models10 Feb 2026
Similar, not cited
Close in wording, no citation either way
- 2026Seeing without Looking: Do Vision-Language Benchmarks Really Test Vision?
- 2025VP-Bench: A Comprehensive Benchmark for Visual Prompting in Multimodal Large Language Models
- 2026Auditing VLM Benchmarks from Existing Evaluation Runs
- 2025Examining Vision Language Models through Multi-dimensional Experiments with Vision and Text Features
- 2026Are VLMs Seeing or Just Saying? Uncovering the Illusion of Visual Re-examination
- 2025V2P-Bench: Evaluating Video-Language Understanding with Visual Prompts for Better Human-Model Interaction
- 2026Seeing Isn't Believing: Uncovering Blind Spots in Evaluator Vision-Language Models
- 2025MVI-Bench: A Comprehensive Benchmark for Evaluating Robustness to Misleading Visual Inputs in LVLMs