When LoRA Betrays: Backdooring Text-to-Image Models by Masquerading as Benign Adapters

arXiv:2602.21977 · cs.CV · Submitted 2026-02-25 · Read on arXiv

cs.CV

Submitted: 2026-02-25

Updated: 2026-04-24

Comments: Accepted to CVPR 2026 main track(poster)

Journal ref: Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR), 2026

Code: https://github.com/spectreinit/MasqLora

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

• Diffusion Model — 18× in this paper · explained in 8 episodes
• Diffusion Models — 17× in this paper · explained in 6 episodes
• Fine-Tuning — 12× in this paper · explained in 5 episodes
• Adaptation — 9× in this paper · explained in 1 episode
• Core — 8× in this paper · explained in 2 episodes
• Personalization — 6× in this paper · explained in 2 episodes
• Attack Success Rate — 4× in this paper
• Ablation — 3× in this paper · explained in 1 episode
• Alignment — 3× in this paper · explained in 1 episode
• Embeddings — 3× in this paper · explained in 2 episodes
• Fidelity — 3× in this paper · explained in 2 episodes
• Ablation Studies — 2× in this paper · explained in 1 episode
• Benchmark — 2× in this paper · explained in 2 episodes
• Contrastive Learning — 2× in this paper · explained in 5 episodes
• Cosine Similarity — 2× in this paper · explained in 3 episodes
• Generative Model — 2× in this paper · explained in 2 episodes
• Generative Models — 2× in this paper · explained in 2 episodes
• Low-Rank Adaptation (LoRA) — 2× in this paper · explained in 9 episodes
• Parameter-Efficient Fine-Tuning — 2× in this paper · explained in 2 episodes
• Semantic Similarity — 2× in this paper · explained in 2 episodes
• Ablation study — 1× in this paper · explained in 1 episode
• Actor — 1× in this paper · explained in 3 episodes
• Adaptability — 1× in this paper · explained in 1 episode
• Attack Success Rate (ASR) — 1× in this paper · explained in 2 episodes
• Generalization — 1× in this paper · explained in 13 episodes
• Generative AI — 1× in this paper · explained in 2 episodes
• Latent Diffusion Model — 1× in this paper · explained in 2 episodes
• Latent Diffusion Models — 1× in this paper · explained in 2 episodes
• Learned Perceptual Image Patch Similarity — 1× in this paper
• Loss Function — 1× in this paper · explained in 2 episodes
• Model Merging — 1× in this paper · explained in 2 episodes
• Nash Equilibrium — 1× in this paper · explained in 2 episodes
• Objective Function — 1× in this paper · explained in 2 episodes
• Parameter Efficiency — 1× in this paper · explained in 3 episodes
• Parameter-Efficient Fine-Tuning (PEFT) — 1× in this paper · explained in 4 episodes
• Robustness — 1× in this paper · explained in 5 episodes
• Semantic Drift — 1× in this paper · explained in 3 episodes
• Semantic Manipulation Index — 1× in this paper
• Variational Bayes — 1× in this paper · explained in 2 episodes

Sources

• Causal-Guided Detoxify Backdoor Attack of Open-Weight LoRA Models
• LoRATK: LoRA Once, Backdoor Everywhere in the Share-and-Play Ecosystem
• BAAAN: Backdoor Attacks Against Autoencoder and GAN-Based Machine Learning Models
• LoBAM: LoRA-Based Backdoor Attack on Model Merging

Related papers

• Loss Knows Best: Detecting Annotation Errors in Videos via Loss Trajectories
• AnchorWeave: World-Consistent Video Generation with Retrieved Local Spatial Memories
• Benchmarking the Robustness of Foundation Models for Mammography under Domain Shift
• MambaX-Net: Dual-Input Mamba-Enhanced Cross-Attention Network for Longitudinal MRI Segmentation
• TeleOCR: Navigating Document Parsing Across Digital and Camera-Captured Documents
• A Survey on Efficient Vision-Language-Action Models