When Robots Obey the Patch: Universal Transferable Patch Attacks on Vision-Language-Action Models

ArXi:2511.21192v3 Announce Type: replace-cross Vision-Language-Action (VLA) models are vulnerable to adversarial attacks, yet universal and transferable attacks remain underexplored, as most existing patches overfit to a single model and fail in black-box settings. To address this gap, we present a systematic study of universal, transferable adversarial patches against VLA-driven robots under unknown architectures, finetuned variants, and sim-to-real shifts. We