SafeVLA-Bench: A Benchmark for the Success-Safety Gap in Vision-Language-Action Models
On the map: Vision-language-action models → Safety and adversarial attacks
Abstract (arXiv)
Vision-language-action (VLA) benchmarks measure whether a policy completes a requested manipulation task, but binary success can hide safety violations along the trajectory: a policy may reach the goal while applying excessive contact, disturbing bystander objects, destabilizing a held object, or entering robot self-contact. We present SafeVLA-Bench, a post-hoc safety-evaluation framework for existing simulator-based VLA benchmarks that reveals violations missed by success-only evaluation. It encodes task-aware safety requirements as Signal Temporal Logic (STL) invariants with quantitative robustness semantics. Alongside native success, it reports the safety rate and the success-but-unsafe rate (SBU) used in prior safety evaluations, and introduces the Violation Severity Index (VSI), a bounded worst-violation depth score. We instantiate SafeVLA-Bench on LIBERO and RoboCasa-365, evaluating twenty-seven policy-benchmark entries across tabletop and kitchen manipulation tasks. High task success does not imply safe execution: the fifteen tabletop policies above 90% mean success still have 18-28% unsafe-episode rates, and 38-56% of successful RoboCasa-365 rollouts violate at least one active safety clause. A post-training case study further shows that SafeVLA-Bench can be used to improve policy safety. Project page: https://safevla.org
Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Placed in Safety and adversarial attacks, one of 13 directions in Vision-language-action models. Builds on 37 of its 56 references that are in the map. First posted on arXiv 30 May 2026.
Builds on
37 of 56 references.
Closest ancestors · 4
Same direction, newest first
- 2026Vision-Language-Action Safety: Threats, Challenges, Evaluations, and Mechanisms26 Apr
- 2026HazardArena: Evaluating Semantic Safety in Vision-Language-Action Models14 Apr
- 2025VLSA: Vision-Language-Action Models with Plug-and-Play Safety Constraint Layer9 Dec
- 2025SafeVLA: Towards Safety Alignment of Vision-Language-Action Model via Constrained Learning5 Mar
Other references · 33
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2023RT-2: Vision-Language-Action Models Transfer Web Knowledge to Robotic Controlcited by 2,993
- 2024OpenVLA: An Open-Source Vision-Language-Action Modelcited by 2,777
- 2024π0: A Vision-Language-Action Flow Model for General Robot Controlcited by 2,297
- 2025π0.5: a Vision-Language-Action Model with Open-World Generalizationcited by 1,653
- 2023LIBERO: Benchmarking Knowledge Transfer for Lifelong Robot Learningcited by 1,338
- 2025GR00T N1: An Open Foundation Model for Generalist Humanoid Robotscited by 1,167
- 2025Fine-Tuning Vision-Language-Action Models: Optimizing Speed and Successcited by 844
- 2023Diffusion Model Alignment Using Direct Preference Optimizationcited by 767
- 2021CALVIN: A Benchmark for Language-Conditioned Policy Learning for Long-Horizon Robot Manipulation Taskscited by 564
- 2025SmolVLA: A Vision-Language-Action Model for Affordable and Efficient Roboticscited by 507
21 more
- 2024Evaluating Real-World Robot Manipulation Policies in Simulationcited by 484
- 2024RoboCasa: Large-Scale Simulation of Everyday Tasks for Generalist Robotscited by 391
- 2025X-VLA: Soft-Prompted Transformer as Scalable Cross-Embodiment Vision-Language-Action Modelcited by 285
- 2025π*0.6: a VLA That Learns From Experiencecited by 280
- 2026Cosmos Policy: Fine-Tuning Video Models for Visuomotor Control and Planningcited by 274
- 2016Control Barrier Function Based Quadratic Programs for Safety Critical Systemscited by 261
- 2025VLA-Adapter: An Effective Paradigm for Tiny-Scale Vision-Language-Action Modelcited by 140
- 2025Interactive Post-Training for Vision-Language-Action Modelscited by 129
- 2026GigaWorld-Policy: An Efficient Action-Centered World--Action Modelcited by 129
- 2025InternVLA-M1: A Spatially Guided Vision-Language-Action Framework for Generalist Robot Policycited by 83
- 2026RoboCasa365: A Large-Scale Simulation Framework for Training and Benchmarking Generalist Robotscited by 65
- 2020Backpropagation through Signal Temporal Logic Specifications: Infusing Logical Structure into Gradient-Based Methodscited by 51
- 2026MolmoAct2: Action Reasoning Models for Real-world Deploymentcited by 45
- 2025VLA-Arena: An Open-Source Framework for Benchmarking Vision-Language-Action Modelscited by 28
- 2026RLDX-1 Technical Reportcited by 25
- 2024ManiSkill-HAB: A Benchmark for Low-Level Manipulation in Home Rearrangement Taskscited by 20
- 2026SimVLA: A Simple VLA Baseline for Robotic Manipulationcited by 10
- 2026OmniGuide: Universal Guidance Fields for Enhancing Generalist Robot Policiescited by 6
- 2026PRTS: A Primitive Reasoning and Tasking System via Contrastive Representationscited by 6
- 2026SafeManip: A Property-Driven Benchmark for Temporal Safety Evaluation in Robotic Manipulationcited by 5
- 2025ROVER: Regulator-Driven Robust Temporal Verification of Black-Box Robot Policiescited by 1
Built on by
Citing papers per year: 2026: 8.
8 papers.
- 2026SoftVTBench: A Safety-Aware Visuo-Tactile Benchmark for Physically Constrained Robotic Manipulation of Deformable Objects (Early Version)cited by 2
- 2026Uncovering and Mitigating Positional Blind Spots in Vision-Language-Action Modelscited by 1
- 2026Logic-VLA: A Temporal Logic Conditioned Vision-Language-Action Modelcited by 0
- 2026No Free Checker: A Survey of Verifiers for Robot Policiescited by 0
- 2026Coding Agents with an Obstacle-Aware Harness for Safe Robot Manipulationcited by 0
- 2026ConflictVLA-Bench: Benchmarking Behavioral Responses of Vision-Language-Action Models to Premise Conflictscited by 0
- 2026Blackout vs. Freeze: Analyzing Physical Failure Modes of VLAs under Camera Faultscited by 0
- 2026WBAG: A Whole-Body and Attached-Geometry Safety Framework for Vision-Language-Action Manipulationcited by 0
- 2026WBAG: A Whole-Body and Attached-Geometry Safety Framework for Vision-Language-Action Manipulation1 Oct 2026
- 2026Blackout vs. Freeze: Analyzing Physical Failure Modes of VLAs under Camera Faults30 Sep 2026
- 2026ConflictVLA-Bench: Benchmarking Behavioral Responses of Vision-Language-Action Models to Premise Conflicts25 Sep 2026
- 2026Coding Agents with an Obstacle-Aware Harness for Safe Robot Manipulation17 Sep 2026
- 2026No Free Checker: A Survey of Verifiers for Robot Policies8 Sep 2026
- 2026Logic-VLA: A Temporal Logic Conditioned Vision-Language-Action Model20 Aug 2026
- 2026Uncovering and Mitigating Positional Blind Spots in Vision-Language-Action Models3 Aug 2026
- 2026SoftVTBench: A Safety-Aware Visuo-Tactile Benchmark for Physically Constrained Robotic Manipulation of Deformable Objects (Early Version)5 Jul 2026
Similar, not cited
Close in wording, no citation either way
- 2026SafeStage: Evaluating Safety Before, During, and After Vision-Language-Conditioned Robot Manipulation ↗
- 2026ForesightSafety-VLA: A Unified Diagnostic Safety Benchmark for Vision-Language-Action Models
- 2026VLPSA: Vision-Language-Poisson-Safe Actions for Full-Body Safety of Learned Policies
- 2026Benchmarking Vision-Language-Action Models on SO-101: Failure and Recovery Analysis
- 2026LIBERO-Safety: A Comprehensive Benchmark for Physical and Semantic Safety in Vision-Language-Action Models
- 2026ShieldVLA: Feasibility-Aware Safety Alignment for Vision-Language-Action Models
- 2026SafeLoop: Risk-Aware Rollback for Vision-Language-Action Manipulation
- 2026SafeRelBench: A Spatial-Relation-Aware Benchmark for Process-Level Safety in VLM-Driven Embodied Agents