CollageAttack: Exploiting Cross-Modal Alignment Flaws in T2I Models through Spatial Text Composition
The paper introduces COLLAGEATTACK, a method to jailbreak text-to-image models by exploiting a flaw where harmful meaning emerges from combining visual context, rendered text, and spatial arrangement rather than explicit text. It works by constructing a structured prompt with three parts: scene construction, surface allocation for text carriers, and spatial recomposition of fragmented harmful phrases.