STRONG-VLA: Decoupled Robustness Learning for Vision-Language-Action Models under Multimodal Perturbations
On the map: Vision-language-action models → Safety and adversarial attacks
Abstract (arXiv)
Despite their strong performance in embodied tasks, recent Vision-Language-Action (VLA) models remain highly fragile under multimodal perturbations, where visual corruption and linguistic noise jointly induce distribution shifts that degrade task-level execution. Existing robustness approaches typically rely on joint training with perturbed data, treating robustness as a static objective, which leads to conflicting optimization between robustness and task fidelity. In this work, we propose STRONG-VLA, a decoupled fine-tuning framework that explicitly separates robustness acquisition from task-aligned refinement. In Stage I, the model is exposed to a curriculum of multimodal perturbations with increasing difficulty, enabling progressive robustness learning under controlled distribution shifts. In Stage II, the model is re-aligned with clean task distributions to recover execution fidelity while preserving robustness. We further establish a comprehensive benchmark with 28 perturbation types spanning both textual and visual modalities, grounded in realistic sources of sensor noise, occlusion, and instruction corruption. Extensive experiments on the LIBERO benchmark show that STRONG-VLA consistently improves task success rates across multiple VLA architectures. On OpenVLA, our method achieves gains of up to 12.60% under seen perturbations and 7.77% under unseen perturbations. Notably, similar or larger improvements are observed on OpenVLA-OFT (+14.48% / +13.81%) and pi0 (+16.49% / +5.58%), demonstrating strong cross-architecture generalization. Real-world experiments on an AIRBOT robotic platform further validate its practical effectiveness. These results highlight the importance of decoupled optimization for multimodal robustness and establish STRONG-VLA as a simple yet principled framework for robust embodied control.
Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Placed in Safety and adversarial attacks, one of 13 directions in Vision-language-action models. Builds on 12 of its 19 references that are in the map. First posted on arXiv 11 Apr 2026.
Builds on
12 of 19 references.
Closest ancestors · 3
Same direction, newest first
- 2025When Alignment Fails: Multimodal Adversarial Attacks on Vision-Language-Action Models20 Nov
- 2025Eva-VLA: Evaluating Vision-Language-Action Models' Robustness Under Real-World Physical Variations23 Sep
- 2024Exploring the Adversarial Vulnerabilities of Vision-Language-Action Models in Robotics18 Nov
Other references · 9
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2023RT-2: Vision-Language-Action Models Transfer Web Knowledge to Robotic Controlcited by 2,993
- 2024OpenVLA: An Open-Source Vision-Language-Action Modelcited by 2,777
- 2024π0: A Vision-Language-Action Flow Model for General Robot Controlcited by 2,297
- 2023LIBERO: Benchmarking Knowledge Transfer for Lifelong Robot Learningcited by 1,338
- 2025Pure Vision Language Action (VLA) Models: A Comprehensive Surveycited by 46
- 2024VLATest: Testing and Evaluating Vision-Language-Action Models for Robotic Manipulationcited by 43
- 2024Run-time Observation Interventions Make Vision-Language-Action Models More Visually Robustcited by 33
- 2025GEVRM: Goal-Expressive Video Generation Model For Robust Visual Manipulationcited by 26
Built on by
Citing papers per year: 2026: 8.
8 papers.
- 2026OA-WAM: Object-Addressable World Action Model for Robust Robot Manipulationcited by 25
- 2026Sequential Planning via Anchored Robotic Keypointscited by 2
- 2026Think Only When Needed: Prompt-Authority Control for Selective Slow-Path Intervention in Vision-Language-Action Manipulationcited by 1
- 2026EATR-Stereo: Embodiment-Aware Token Routing of Paired Stereo Evidence for Humanoid Vision-Language-Action Controlcited by 0
- 2026CertVLA: Certified Defense against Physical Visual Attacks for Vision-Language-Action Modelscited by 0
- 2026DS-VLA: A Dendritic-inspired Vision-Language-Action Model for Robust Action Controlcited by 0
- 2026Are Vision-Language-Action Models Robust to One-Step Observation Perturbations?cited by 0
- 2026RawVLA: Embodied Neural Image Signal Processor For Robotic Manipulationcited by 0
- 2026RawVLA: Embodied Neural Image Signal Processor For Robotic Manipulation29 Sep 2026
- 2026Are Vision-Language-Action Models Robust to One-Step Observation Perturbations?26 Sep 2026
- 2026DS-VLA: A Dendritic-inspired Vision-Language-Action Model for Robust Action Control26 Sep 2026
- 2026Think Only When Needed: Prompt-Authority Control for Selective Slow-Path Intervention in Vision-Language-Action Manipulation24 Aug 2026
- 2026CertVLA: Certified Defense against Physical Visual Attacks for Vision-Language-Action Models21 Aug 2026
- 2026EATR-Stereo: Embodiment-Aware Token Routing of Paired Stereo Evidence for Humanoid Vision-Language-Action Control18 Aug 2026
- 2026Sequential Planning via Anchored Robotic Keypoints29 Jun 2026
- 2026OA-WAM: Object-Addressable World Action Model for Robust Robot Manipulation7 May 2026
Similar, not cited
Close in wording, no citation either way
- 2025RobustVLA: On Robustness of Vision-Language-Action Model against Multi-Modal Perturbations
- 2025LIBERO-Plus: In-depth Robustness Analysis of Vision-Language-Action Models
- 2026RoVLA: Multi-Consistency Constraints for Robust Vision-Language-Action Models
- 2026StableVLA: Towards Robust Vision-Language-Action Models without Extra Data
- 2025RobustVLA: Robustness-Aware Reinforcement Post-Training for Vision-Language-Action Models
- 2026Scaling Test-Time Robustness of Vision-Language Models via Self-Critical Inference Framework
- 2026Revisiting Parameter Redundancy in Vision-Language-Action Models: Insights from VLM-to-VLA Adaptation
- 2026LIBERO-X: Robustness Litmus for Vision-Language-Action Models