TEAR: Temporal-aware Automated Red-teaming for Text-to-Video Models
Jiaming He 1, Guanyu Hou 2, Hongwei Li 1, Zhicong Huang 3, Kangjie Chen 4, Yi Yu 5, Wenbo Jiang 1, Guowen Xu 1, Tianwei Zhang 4
Published on arXiv
2511.21145
Prompt Injection
OWASP LLM Top 10 — LLM01
Key Finding
TEAR achieves over 80% attack success rate on open-source and commercial T2V models, a significant improvement over the prior best of 57%.
TEAR
Novel technique introduced
Text-to-Video (T2V) models are capable of synthesizing high-quality, temporally coherent dynamic video content, but the diverse generation also inherently introduces critical safety challenges. Existing safety evaluation methods,which focus on static image and text generation, are insufficient to capture the complex temporal dynamics in video generation. To address this, we propose a TEmporal-aware Automated Red-teaming framework, named TEAR, an automated framework designed to uncover safety risks specifically linked to the dynamic temporal sequencing of T2V models. TEAR employs a temporal-aware test generator optimized via a two-stage approach: initial generator training and temporal-aware online preference learning, to craft textually innocuous prompts that exploit temporal dynamics to elicit policy-violating video output. And a refine model is adopted to improve the prompt stealthiness and adversarial effectiveness cyclically. Extensive experimental evaluation demonstrates the effectiveness of TEAR across open-source and commercial T2V systems with over 80% attack success rate, a significant boost from prior best result of 57%.
Key Contributions
- TEAR: a two-stage automated red-teaming framework (initial generator training + temporal-aware online preference learning) that generates textually innocuous prompts exploiting temporal dynamics in T2V models
- A cyclical refine model that iteratively improves prompt stealthiness and adversarial effectiveness
- State-of-the-art attack success rate of >80% on open-source and commercial T2V systems, up from prior best of 57%