mlsanityData to 7 Oct 2026

SafeVLA-Bench: A Benchmark for the Success-Safety Gap in Vision-Language-Action Models

arXiv 2606.00773 ↗First posted 30 May 2026cs.ROcited by 8

On the map: Vision-language-action models → Safety and adversarial attacks

Abstract (arXiv)

Vision-language-action (VLA) benchmarks measure whether a policy completes a requested manipulation task, but binary success can hide safety violations along the trajectory: a policy may reach the goal while applying excessive contact, disturbing bystander objects, destabilizing a held object, or entering robot self-contact. We present SafeVLA-Bench, a post-hoc safety-evaluation framework for existing simulator-based VLA benchmarks that reveals violations missed by success-only evaluation. It encodes task-aware safety requirements as Signal Temporal Logic (STL) invariants with quantitative robustness semantics. Alongside native success, it reports the safety rate and the success-but-unsafe rate (SBU) used in prior safety evaluations, and introduces the Violation Severity Index (VSI), a bounded worst-violation depth score. We instantiate SafeVLA-Bench on LIBERO and RoboCasa-365, evaluating twenty-seven policy-benchmark entries across tabletop and kitchen manipulation tasks. High task success does not imply safe execution: the fifteen tabletop policies above 90% mean success still have 18-28% unsafe-episode rates, and 38-56% of successful RoboCasa-365 rollouts violate at least one active safety clause. A post-training case study further shows that SafeVLA-Bench can be used to improve policy safety. Project page: https://safevla.org

Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Placed in Safety and adversarial attacks, one of 13 directions in Vision-language-action models. Builds on 37 of its 56 references that are in the map. First posted on arXiv 30 May 2026.

Builds on

37 of 56 references.

Closest ancestors · 4

Same direction, newest first

  1. 2026Vision-Language-Action Safety: Threats, Challenges, Evaluations, and Mechanisms26 Apr
  2. 2026HazardArena: Evaluating Semantic Safety in Vision-Language-Action Models14 Apr
  3. 2025VLSA: Vision-Language-Action Models with Plug-and-Play Safety Constraint Layer9 Dec
  4. 2025SafeVLA: Towards Safety Alignment of Vision-Language-Action Model via Constrained Learning5 Mar

Other references · 33

  1. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
  2. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
  3. 2023RT-2: Vision-Language-Action Models Transfer Web Knowledge to Robotic Controlcited by 2,993
  4. 2024OpenVLA: An Open-Source Vision-Language-Action Modelcited by 2,777
  5. 2024π0: A Vision-Language-Action Flow Model for General Robot Controlcited by 2,297
  6. 2025π0.5: a Vision-Language-Action Model with Open-World Generalizationcited by 1,653
  7. 2023LIBERO: Benchmarking Knowledge Transfer for Lifelong Robot Learningcited by 1,338
  8. 2025GR00T N1: An Open Foundation Model for Generalist Humanoid Robotscited by 1,167
  9. 2025Fine-Tuning Vision-Language-Action Models: Optimizing Speed and Successcited by 844
  10. 2023Diffusion Model Alignment Using Direct Preference Optimizationcited by 767
  11. 2021CALVIN: A Benchmark for Language-Conditioned Policy Learning for Long-Horizon Robot Manipulation Taskscited by 564
  12. 2025SmolVLA: A Vision-Language-Action Model for Affordable and Efficient Roboticscited by 507
21 more
  1. 2024Evaluating Real-World Robot Manipulation Policies in Simulationcited by 484
  2. 2024RoboCasa: Large-Scale Simulation of Everyday Tasks for Generalist Robotscited by 391
  3. 2025X-VLA: Soft-Prompted Transformer as Scalable Cross-Embodiment Vision-Language-Action Modelcited by 285
  4. 2025π*0.6: a VLA That Learns From Experiencecited by 280
  5. 2026Cosmos Policy: Fine-Tuning Video Models for Visuomotor Control and Planningcited by 274
  6. 2016Control Barrier Function Based Quadratic Programs for Safety Critical Systemscited by 261
  7. 2025VLA-Adapter: An Effective Paradigm for Tiny-Scale Vision-Language-Action Modelcited by 140
  8. 2025Interactive Post-Training for Vision-Language-Action Modelscited by 129
  9. 2026GigaWorld-Policy: An Efficient Action-Centered World--Action Modelcited by 129
  10. 2025InternVLA-M1: A Spatially Guided Vision-Language-Action Framework for Generalist Robot Policycited by 83
  11. 2026RoboCasa365: A Large-Scale Simulation Framework for Training and Benchmarking Generalist Robotscited by 65
  12. 2020Backpropagation through Signal Temporal Logic Specifications: Infusing Logical Structure into Gradient-Based Methodscited by 51
  13. 2026MolmoAct2: Action Reasoning Models for Real-world Deploymentcited by 45
  14. 2025VLA-Arena: An Open-Source Framework for Benchmarking Vision-Language-Action Modelscited by 28
  15. 2026RLDX-1 Technical Reportcited by 25
  16. 2024ManiSkill-HAB: A Benchmark for Low-Level Manipulation in Home Rearrangement Taskscited by 20
  17. 2026SimVLA: A Simple VLA Baseline for Robotic Manipulationcited by 10
  18. 2026OmniGuide: Universal Guidance Fields for Enhancing Generalist Robot Policiescited by 6
  19. 2026PRTS: A Primitive Reasoning and Tasking System via Contrastive Representationscited by 6
  20. 2026SafeManip: A Property-Driven Benchmark for Temporal Safety Evaluation in Robotic Manipulationcited by 5
  21. 2025ROVER: Regulator-Driven Robust Temporal Verification of Black-Box Robot Policiescited by 1

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 8.

8 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026SafeStage: Evaluating Safety Before, During, and After Vision-Language-Conditioned Robot Manipulation ↗
  2. 2026ForesightSafety-VLA: A Unified Diagnostic Safety Benchmark for Vision-Language-Action Models
  3. 2026VLPSA: Vision-Language-Poisson-Safe Actions for Full-Body Safety of Learned Policies
  4. 2026Benchmarking Vision-Language-Action Models on SO-101: Failure and Recovery Analysis
  5. 2026LIBERO-Safety: A Comprehensive Benchmark for Physical and Semantic Safety in Vision-Language-Action Models
  6. 2026ShieldVLA: Feasibility-Aware Safety Alignment for Vision-Language-Action Models
  7. 2026SafeLoop: Risk-Aware Rollback for Vision-Language-Action Manipulation
  8. 2026SafeRelBench: A Spatial-Relation-Aware Benchmark for Process-Level Safety in VLM-Driven Embodied Agents