mlsanityData to 14 Oct 2026

The Price of Consistency: Exploiting Visual Anchors for Multimodal Jailbreaking in Video Generation

arXiv 2609.07216 ↗First posted 7 Sep 2026cs.CVcited by 0

On the map: LLM safety and security → Vision-language and text-to-image safety

Abstract (arXiv)

The rapid evolution of video generation has shifted the paradigm from pure text-driven to multi-conditional controllable generation, with reference images now widely adopted as conditional inputs to achieve superior spatiotemporal consistency. While these reference images serve as powerful visual anchors that significantly enhance controllability, their impact on safety remains largely unexplored. In this work, we reveal the visual anchoring effect: by enforcing consistency, the mechanism prevents the generated content from drifting away from the original harmful intent, thereby eliminating the model's natural safety escape route from harmful to benign content. Consequently, visual anchors inherently increase the safety risk---this is the price of consistency. Building on this insight, we propose Decoupling Intent via Visual Anchors (DIVA), a training-free multimodal jailbreak framework for video generation that exploits this vulnerability. DIVA decouples harmful intent into a static visual anchor image and a dynamic motion text prompt, and employs dual-criteria selection to balance attack stealthiness with semantic preservation. Extensive experiments across various leading commercial platforms and mainstream open-source video generation models demonstrate that DIVA achieves a substantially higher Attack Success Rate than existing text-only methods. To facilitate future research, we additionally contribute TI2VSafetyBench, the first safety benchmark for multi-conditional video generation.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Vision-language and text-to-image safety, one of 12 directions in LLM safety and security. Builds on 20 of its 70 references that are in the map. First posted on arXiv 7 Sep 2026.

Builds on

20 of 70 references.

Closest ancestors · 2

Same direction, newest first

  1. 2025Jailbreaking on Text-to-Video Models via Scene Splitting Strategy26 Sep
  2. 2025T2V-OptJail: Discrete Prompt Optimization for Text-to-Video Jailbreak Attacks10 May

Other references · 18

  1. 2025Qwen3 Technical Reportcited by 8,820
  2. 2024GPT-4o System Cardcited by 4,588
  3. 2025Qwen3-VL Technical Reportcited by 2,793
  4. 2025Wan: Open and Advanced Large-Scale Video Generative Modelscited by 2,708
  5. 2023Stable Video Diffusion: Scaling Latent Video Diffusion Models to Large Datasetscited by 2,581
  6. 2022Imagen Video: High Definition Video Generation with Diffusion Modelscited by 1,778
  7. 2025FLUX.1 Kontext: Flow Matching for In-Context Image Generation and Editing in Latent Spacecited by 1,006
  8. 2024Open-Sora: Democratizing Efficient Video Production for Allcited by 652
  9. 2024LTX-Video: Realtime Video Latent Diffusioncited by 581
  10. 2025VideoLLaMA 3: Frontier Multimodal Foundation Models for Image and Video Understandingcited by 518
  11. 2024Sora: A Review on Background, Technology, Limitations, and Opportunities of Large Vision Modelscited by 477
  12. 2022MagicVideo: Efficient Video Generation With Latent Diffusion Modelscited by 465
6 more
  1. 2023I2VGen-XL: High-Quality Image-to-Video Synthesis via Cascaded Diffusion Modelscited by 350
  2. 2025Z-Image: An Efficient Image Generation Foundation Model with Single-Stream Diffusion Transformercited by 277
  3. 2025Controllable Video Generation: A Surveycited by 98
  4. 2025Step-Video-TI2V Technical Report: A State-of-the-Art Text-Driven Image-to-Video Generation Modelcited by 28
  5. 2025MAGREF: Masked Guidance for Any-Reference Video Generation with Subject Disentanglementcited by 23
  6. 2024BSPA: Exploring Black-box Stealthy Prompt Attacks against Image Generatorscited by 7

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026VII: Visual Instruction Injection for Jailbreaking Image-to-Video Generation Models
  2. 2026TempJail: Temporal Jailbreak Attacks against Image-to-Video Generation Models
  3. 2026Between Safe Boundaries: Exploiting Temporal Consistency for Jailbreaking Text-To-Video Generation Models
  4. 2024Jailbreak Attacks and Defenses against Multimodal Generative Models: A Survey
  5. 2026When the Prompt Becomes Visual: Vision-Centric Jailbreak Attacks for Large Image Editing Models
  6. 2026Two Frames Matter: A Temporal Attack for Text-to-Video Model Jailbreaking
  7. 2026TYPO: Instruction-Dense Visual Jailbreaks against Commercial Closed-Source Image-Generation Models
  8. 2026Low-Effort Jailbreak Attacks Against Text-to-Image Safety Filters