BadAction: Backdoor Attacks on Interactive Video Generation via Action-Guided Triggers

arXiv:2609.39047 · cs.CV, cs.LG · Submitted 2026-09-30 · Read on arXiv

cs.CV, cs.LG

Submitted: 2026-09-30

Updated: 2026-09-30

Comments: 12 pages, 6 figures, 5 tables. Project page: https://wsad55.github.io/badaction01/

Project page: https://oasis-model.github.io

License: http://creativecommons.org/licenses/by/4.0/

The gist: Interactive video generation (IVG) models have achieved remarkable progress in producing controllable visual content guided by user-defined actions, yet their security vulnerabilities remain largely

Terminology

Abstract

Interactive video generation (IVG) models have achieved remarkable progress in producing controllable visual content guided by user-defined actions, yet their security vulnerabilities remain largely unexplored. In this paper, we present the first systematic study of backdoor attacks against the interactivity of IVG models. Based on this attack surface, we propose BadAction, which leverages action-guided triggers to achieve the attack. Specifically, BadAction implants predefined motion patterns into the action sequences of backdoor samples and associates them with a static target video. Once triggered, the backdoored model generates frozen future frames that no longer respond to subsequent user actions, while preserving normal behavior on benign action sequences. In addition, we explore a stealthier attack in which multimodal triggers jointly poison action, text, and image inputs. Experiments show that BadAction achieves average attack success rates of 91.0% with action-only triggers and 80.4% with multimodal triggers. Moreover, extensive defense evaluations show that BadAction successfully bypasses existing backdoor detection methods, revealing a critical security gap in the interactive video generation pipeline. Project page: https://wsad55.github.io/badaction01/.

Sources

Related papers