CIVA: Critic-Induced Value-Subspace Attacks on Visual World-Model Agents

arXiv:2608.21114v1 Announce Type: cross Abstract: Visual world-model agents such as DreamerV3 act through a recurrent latent state rather than a single observation, which weakens frame-wise observation attacks and makes their perturbations vary sharply over time under a strict per-frame perturbation constraint. We study white-box, causal, online attacks on such agents and propose Critic-Induced Value-Subspace Attacks (extbf{CIVA}). Our key observation is that, along a rollout, critic-guided perturbations concentrate in a low-dimensional subspace induced by the victim's own critic. Based on this observation, CIVA first probes the frozen victim offline with critic-guided PGD and extracts a low-rank value-subspace by SVD. At test time, it optimizes only the subspace coefficients, smooths them with an exponential moving average (EMA), and maps them back to pixels. This design attacks value-sensitive recurrent dynamics while keeping the online optimization cheap and temporally coherent. Extensive experiments on DMC walker walk, Atari Pong, and Crafter show that CIVA consistently outperforms five recent methods; on DMC walker walk, it achieves the largest reward drop of 26.07% while keeping temporal variation low, with TempAbs of 0.646.

Related

• MaSRead: Content-Addressed Reading of Replicated Latent Stores
• Operator-on-F complements value-equivalence: a planning-time diagnostic for latent world models
• FLAT: Revealing Hidden Latent-Conditioned Backdoor Failures in Federated Learning

Source: arXiv cs.AI | 2026-08-24