LIBERO-Safety: A Comprehensive Benchmark for Physical and Semantic Safety in Vision-Language-Action Models
On the map: Vision-language-action models → Safety and adversarial attacks
Abstract (arXiv)
Despite the impressive manipulation capabilities of Vision-Language-Action (VLA) models, their operational safety under strict constraints remains largely unverified. To address this, we introduce a parametric safety benchmark to procedurally generate safety-critical scenarios with comprehensive stochasticity. To overcome the scalability bottlenecks of human teleoperation, we develop a novel keypose-driven data generation pipeline. Leveraging this infrastructure, we curate a large-scale dataset of 19,664 strictly collision-free demonstrations with extensive domain randomization. We then conduct a systematic cross-paradigm evaluation of eight VLA and two embodied foundation models. Our analysis reveals a critical generalization-safety tension: although high-diversity training fosters safer trajectories, task success remains fundamentally bottlenecked by sub-optimal trajectory synthesis and semantic misalignment. By providing a scalable pipeline, a robust dataset, and profound failure-mode insights, LIBERO-Safety establishes a crucial foundation for developing safe and reliable VLA models.
Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Placed in Safety and adversarial attacks, one of 13 directions in Vision-language-action models. Builds on 54 of its 60 references that are in the map. First posted on arXiv 22 Jun 2026.
Builds on
54 of 60 references.
Closest ancestors · 2
Same direction, newest first
- 2025VLSA: Vision-Language-Action Models with Plug-and-Play Safety Constraint Layer9 Dec
- 2025SafeVLA: Towards Safety Alignment of Vision-Language-Action Model via Constrained Learning5 Mar
Other references · 52
- 2025Qwen3 Technical Reportcited by 8,195
- 2023RT-2: Vision-Language-Action Models Transfer Web Knowledge to Robotic Controlcited by 2,993
- 2024OpenVLA: An Open-Source Vision-Language-Action Modelcited by 2,777
- 2024π0: A Vision-Language-Action Flow Model for General Robot Controlcited by 2,297
- 2022RT-1: Robotics Transformer for Real-World Control at Scalecited by 2,007
- 2025π0.5: a Vision-Language-Action Model with Open-World Generalizationcited by 1,653
- 2024Octo: An Open-Source Generalist Robot Policycited by 1,427
- 2023LIBERO: Benchmarking Knowledge Transfer for Lifelong Robot Learningcited by 1,338
- 2025GR00T N1: An Open Foundation Model for Generalist Humanoid Robotscited by 1,167
- 2025Fine-Tuning Vision-Language-Action Models: Optimizing Speed and Successcited by 844
- 2025V-JEPA 2: Self-Supervised Video Models Enable Understanding, Prediction and Planningcited by 738
- 2024RDT-1B: a Diffusion Foundation Model for Bimanual Manipulationcited by 670
38 more
- 2019RLBench: The Robot Learning Benchmark & Learning Environmentcited by 669
- 2021CALVIN: A Benchmark for Language-Conditioned Policy Learning for Long-Horizon Robot Manipulation Taskscited by 564
- 2024Evaluating Real-World Robot Manipulation Policies in Simulationcited by 484
- 2025RoboTwin 2.0: A Scalable Data Generator and Benchmark with Strong Domain Randomization for Robust Bimanual Robotic Manipulationcited by 477
- 2020GRAB: A Dataset of Whole-Body Human Grasping of Objectscited by 397
- 2024RoboCasa: Large-Scale Simulation of Everyday Tasks for Generalist Robotscited by 391
- 2025UniVLA: Learning to Act Anywhere with Task-centric Latent Actionscited by 386
- 2025WorldVLA: Towards Autoregressive Action World Modelcited by 351
- 2025X-VLA: Soft-Prompted Transformer as Scalable Cross-Embodiment Vision-Language-Action Modelcited by 285
- 2025π*0.6: a VLA That Learns From Experiencecited by 280
- 2025LIBERO-Plus: In-depth Robustness Analysis of Vision-Language-Action Modelscited by 278
- 2024A Survey on Vision-Language-Action Models for Embodied AIcited by 274
- 2025LIBERO-PRO: Towards Robust and Fair Evaluation of Vision-Language-Action Models Beyond Memorizationcited by 166
- 2021BEHAVIOR: Benchmark for Everyday Household Activities in Virtual, Interactive, and Ecological Environmentscited by 161
- 2025SimpleVLA-RL: Scaling VLA Training via Reinforcement Learningcited by 141
- 2025Interactive Post-Training for Vision-Language-Action Modelscited by 129
- 2025RoboTwin: Dual-Arm Robot Benchmark with Generative Digital Twinscited by 117
- 2025Improving Vision-Language-Action Model with Online Reinforcement Learningcited by 107
- 2026VLA-JEPA: Enhancing Vision-Language-Action Model with Latent World Modelcited by 104
- 2025RoboBrain 2.0 Technical Reportcited by 87
- 2025RoboCOIN: An Open-Sourced Bimanual Robotic Data Collection for Integrated Manipulationcited by 72
- 2025RynnVLA-002: A Unified Vision-Language-Action and World Modelcited by 70
- 2025RL-100: Performant Robotic Manipulation with Real-World Reinforcement Learningcited by 47
- 2023cuRobo: Parallelized Collision-Free Minimum-Jerk Robot Motion Generationcited by 46
- 2025Generalizing Safety Beyond Collision-Avoidance via Latent-Space Reachability Analysiscited by 44
- 2025GR-RL: Going Dexterous and Precise for Long-Horizon Robotic Manipulationcited by 41
- 2026RynnBrain: Open Embodied Foundation Modelscited by 33
- 2025TA-VLA: Elucidating the Design Space of Torque-aware Vision-Language-Action Modelscited by 30
- 2025VLA-Arena: An Open-Source Framework for Benchmarking Vision-Language-Action Modelscited by 28
- 2025NORA-1.5: A Vision-Language-Action Model Trained using World Model- and Action-based Preference Rewardscited by 26
- 2025RynnVLA-001: Using Human Demonstrations to Improve Robot Manipulationcited by 24
- 20233D Implicit Transporter for Temporally Consistent Keypoint Discoverycited by 20
- 2024PreAfford: Universal Affordance-Based Pre-Grasping for Diverse Objects and Environmentscited by 11
- 2025Safe, Task-Consistent Manipulation with Operational Space Control Barrier Functionscited by 10
- 2025SafeBimanual: Diffusion-based Trajectory Optimization for Safe Bimanual Manipulationcited by 9
- 2025RoboChemist: Long-Horizon and Safety-Compliant Robotic Chemical Experimentationcited by 9
- 2026Dexora: Open-source VLA for High-DoF Bimanual Dexteritycited by 9
- 2025CBF-RL: Safety Filtering Reinforcement Learning in Training with Control Barrier Functionscited by 8
50 most cited of 52 All 52 (JSON)
Built on by
Citing papers per year: 2026: 8.
8 papers.
- 2026From World Action Models to Embodied Brains: A Roadmap for Open-World Physical Intelligencecited by 1
- 2026LIBERO-RECOVER: Beyond Task Success Towards Failure Recovery in Robotic Manipulation Modelscited by 1
- 2026VLA-ULAP: Interleaving Cloud VLA Calls with Ultra-Lightweight Local Action Prediction at the Edgecited by 0
- 2026Coding Agents with an Obstacle-Aware Harness for Safe Robot Manipulationcited by 0
- 2026VLPSA: Vision-Language-Poisson-Safe Actions for Full-Body Safety of Learned Policiescited by 0
- 2026LIBERO-MAX: Do Robot Policies Adapt When the World Changes?cited by 0
- 2026Multi-Link Safety Filtering for VLA Policies Around Moving Hazardscited by 0
- 2026WBAG: A Whole-Body and Attached-Geometry Safety Framework for Vision-Language-Action Manipulationcited by 0
- 2026WBAG: A Whole-Body and Attached-Geometry Safety Framework for Vision-Language-Action Manipulation1 Oct 2026
- 2026Multi-Link Safety Filtering for VLA Policies Around Moving Hazards30 Sep 2026
- 2026LIBERO-MAX: Do Robot Policies Adapt When the World Changes?29 Sep 2026
- 2026VLPSA: Vision-Language-Poisson-Safe Actions for Full-Body Safety of Learned Policies18 Sep 2026
- 2026Coding Agents with an Obstacle-Aware Harness for Safe Robot Manipulation17 Sep 2026
- 2026VLA-ULAP: Interleaving Cloud VLA Calls with Ultra-Lightweight Local Action Prediction at the Edge16 Sep 2026
- 2026LIBERO-RECOVER: Beyond Task Success Towards Failure Recovery in Robotic Manipulation Models4 Sep 2026
- 2026From World Action Models to Embodied Brains: A Roadmap for Open-World Physical Intelligence13 Jul 2026
Similar, not cited
Close in wording, no citation either way
- 2026LIBERO-X: Robustness Litmus for Vision-Language-Action Models
- 2026HazardArena: Evaluating Semantic Safety in Vision-Language-Action Models
- 2026SafeVLA-Bench: A Benchmark for the Success-Safety Gap in Vision-Language-Action Models
- 2026ShieldVLA: Feasibility-Aware Safety Alignment for Vision-Language-Action Models
- 2026Vision-Language-Action Safety: Threats, Challenges, Evaluations, and Mechanisms
- 2026ForesightSafety-VLA: A Unified Diagnostic Safety Benchmark for Vision-Language-Action Models
- 2026Benchmarking Vision-Language-Action Models on SO-101: Failure and Recovery Analysis
- 2026SafeStage: Evaluating Safety Before, During, and After Vision-Language-Conditioned Robot Manipulation ↗