Zero-Query Jailbreaks via Filter-Generator Discrepancy in T2I Systems
August 4, 2026
Adversarial attacks exploit the Filter-Generator Discrepancy (FGD) to bypass text-to-image safety filters. By optimizing perturbations that minimize perceived risk for filters while preserving visual intent for generators, these offline attacks evade prompt-level security without requiring target model queries.
HOW THIS AFFECTS YOU
●
researcherYou can exploit the representation gap between safety filters and diffusion models.
●
policyYou must account for offline, zero-query transfer attacks in safety evaluations.