Visually Legible but Adversarial: Watermark-Constrained Attacks on End-to-End VLMs for Document Understanding
Results identify conventional watermark-shaped supports as an adversarial surface for document VLMs in the evaluated white-box setting, identifying adversarial optimization as the primary cause of degradation.