Search papers, labs, and topics across Lattice.
This paper introduces BSB, a novel jailbreak framework for text-to-video (T2V) models that exploits temporal consistency to enhance attack efficacy. By encoding harmful intent through the transition between harmless boundary states and utilizing Monte Carlo Tree Search in a textual proxy space, BSB significantly reduces the computational burden of traditional video query optimization methods. Experimental results demonstrate that BSB achieves an average 18.6% improvement in attack success rate over existing methods, highlighting the importance of temporal consistency in T2V model vulnerabilities.
BSB reveals that leveraging temporal consistency can dramatically enhance the effectiveness of jailbreak attacks on text-to-video models, achieving unprecedented success rates.
Recently, text-to-video (T2V) models have been widely deployed, sparking growing concerns over their robustness against jailbreak attacks. Existing jailbreak methods, mostly adapted from text-to-image attacks, suffer notable drawbacks when applied to T2V systems. They fail to fully leverage temporal consistency, an inherent characteristic of video generation. Besides, these methods demand heavy video query optimization, which is infeasible in practical black-box scenarios. Their adversarial prompt search is also driven by heuristic local signals, lacking principled structured exploration strategies. To tackle these limitations, we propose BSB, a structured, query-efficient jailbreak framework for T2V models. BSB harnesses temporal consistency by encoding harmful intent as the transition between two individually harmless boundary states. Under this paradigm, the attack targets boundary-state pairs whose interpolation tends to produce unsafe intermediate frames during video generation. Directly evaluating all candidate pairs within the video space incurs prohibitive computation cost. Instead, BSB conducts Monte Carlo Tree Search (MCTS) in a cheaper textual proxy space and regularly calibrates search outcomes with sparse video-level evaluations. We conduct comprehensive experiments on mainstream commercial T2V models including Veo 3.1, Sora 2, Seedance and Kling v1. Results show BSB surpasses all existing jailbreak baselines, delivering an average 18.6% relative gain in attack success rate over the strongest competitor across evaluated models. Our findings identify temporal consistency as an understudied yet vital attack surface for T2V models and verify that structured search facilitates effective vulnerability discovery under constrained query budgets.
