mlsanityData to 14 Oct 2026

VILTA: A VLM-in-the-Loop Adversary for Enhancing Driving Policy Robustness

arXiv 2601.12672 ↗First posted 19 Jan 2026cs.CVcited by 6

On the map: End-to-end autonomous driving → Adversarial scenarios and safety testing

Abstract (arXiv)

The safe deployment of autonomous driving (AD) systems is fundamentally hindered by the long-tail problem, where rare yet critical driving scenarios are severely underrepresented in real-world data. Existing solutions including safety-critical scenario generation and closed-loop learning often rely on rule-based heuristics, resampling methods and generative models learned from offline datasets, limiting their ability to produce diverse and novel challenges. While recent works leverage Vision Language Models (VLMs) to produce scene descriptions that guide a separate, downstream model in generating hazardous trajectories for agents, such two-stage framework constrains the generative potential of VLMs, as the diversity of the final trajectories is ultimately limited by the generalization ceiling of the downstream algorithm. To overcome these limitations, we introduce VILTA (VLM-In-the-Loop Trajectory Adversary), a novel framework that integrates a VLM into the closed-loop training of AD agents. Unlike prior works, VILTA actively participates in the training loop by comprehending the dynamic driving environment and strategically generating challenging scenarios through direct, fine-grained editing of surrounding agents' future trajectories. This direct-editing approach fully leverages the VLM's powerful generalization capabilities to create a diverse curriculum of plausible yet challenging scenarios that extend beyond the scope of traditional methods. We demonstrate that our approach substantially enhances the safety and robustness of the resulting AD policy, particularly in its ability to navigate critical long-tail events.

Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in Adversarial scenarios and safety testing, one of 9 directions in End-to-end autonomous driving. Builds on 26 of its 48 references that are in the map. First posted on arXiv 19 Jan 2026.

Builds on

26 of 48 references.

Closest ancestors · 4

Same direction, newest first

  1. 2025From Words to Collisions: LLM-Guided Evaluation and Adversarial Generation of Safety-Critical Driving Scenarios4 Feb
  2. 2024CaDRE: Controllable and Diverse Generation of Safety-Critical Driving Scenarios using Real-World Trajectories19 Mar
  3. 2023CAT: Closed-loop Adversarial Training for Safe End-to-End Driving19 Oct
  4. 2023Stackelberg Driver Model for Continual Policy Improvement in Scenario-Based Closed-Loop Autonomous Driving25 Sep

Other references · 22

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  2. 2017Proximal Policy Optimization Algorithmscited by 15,215
  3. 2018Soft Actor-Critic: Off-Policy Maximum Entropy Deep Reinforcement Learning with a Stochastic Actorcited by 4,885
  4. 2019nuScenes: A multimodal dataset for autonomous drivingcited by 4,523
  5. 2025Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilitiescited by 3,796
  6. 2023RT-2: Vision-Language-Action Models Transfer Web Knowledge to Robotic Controlcited by 3,080
  7. 2017CARLA: An Open Urban Driving Simulatorcited by 2,449
  8. 2021SDEdit: Guided Image Synthesis and Editing with Stochastic Differential Equationscited by 1,937
  9. 2018Behavioral Cloning from Observationcited by 492
  10. 2023End-to-end Autonomous Driving: Challenges and Frontierscited by 490
  11. 2021DenseTNT: End-to-end Trajectory Prediction from Dense Goal Setscited by 295
  12. 2021MetaDrive: Composing Diverse Driving Scenarios for Generalizable Reinforcement Learningcited by 290
10 more
  1. 2022Evolving Curricula with Regret-Based Environment Designcited by 173
  2. 2021AdvSim: Generating Safety-Critical Scenarios for Self-Driving Vehiclescited by 137
  3. 2024ChatScene: Knowledge-Enabled Safety-Critical Scenario Generation for Autonomous Vehiclescited by 93
  4. 2022"Curse of rarity" for autonomous vehiclescited by 63
  5. 2024Versatile Behavior Diffusion for Generalized Traffic Agent Simulationcited by 30
  6. 2025Scenario Dreamer: Vectorized Latent Diffusion for Generating Driving Simulation Environmentscited by 28
  7. 2020Training Adversarial Agents to Exploit Weaknesses in Deep Control Policiescited by 24
  8. 2024Causal Composition Diffusion Model for Closed-loop Traffic Generationcited by 22
  9. 2025DriveGen: Towards Infinite Diverse Traffic Scenarios with Large Modelscited by 7
  10. 2025CrashAgent: Crash Scenario Generation via Multi-modal Reasoningcited by 5

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 6.

6 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025VLM as Strategist: Adaptive Generation of Safety-critical Testing Scenarios via Guided Diffusion
  2. 2024VLM-AD: End-to-End Autonomous Driving through Vision-Language Model Supervision
  3. 2025Enhancing End-to-End Autonomous Driving with Risk Semantic Distillaion from VLM
  4. 2025VLM-SAFE: Vision-Language Model-Guided Safety-Aware Reinforcement Learning with World Models for Autonomous Driving
  5. 2025CurricuVLM: Towards Safe Autonomous Driving via Personalized Safety-Critical Curriculum Learning with Vision-Language Models
  6. 2025Learning from Risk: LLM-Guided Generation of Safety-Critical Scenarios with Prior Knowledge
  7. 2025VLAD: A VLM-Augmented Autonomous Driving Framework with Hierarchical Planning and Interpretable Decision Process
  8. 2025Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving