ShadowFPT Exploits Frozen Backbones to Attack Federated Prompt Tuning
October 19, 2026
ShadowFPT is a backdoor attack targeting Federated Prompt Tuning in vision-language models. By pretraining a Shadow Trigger against a frozen CLIP visual encoder, a malicious client can steer triggered inputs toward a target class while appearing benign during global prompt updates.
HOW THIS AFFECTS YOU
●
researcherYou must account for the vulnerability of frozen backbones in federated learning setups.
●
policyThis highlights a critical security risk in decentralized model fine-tuning that needs governance.