TA-SPA Enables Transferable Jailbreak Attacks on Multimodal Models

The Text-Anchored Semantic Perturbation Attack (TA-SPA) framework optimizes perturbations in a text-anchored semantic space to bypass safety alignment in MLLMs. It utilizes semantic factorization to separate cross-modal factors from modality-specific residuals.