@misc{indiciaecb0bc2a095cf,
  title = {Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs},
  author = {Tao Lin and Gaojie Jin and Zongxin Liu and Peng Wu and Lijia Yu},
  year = {2026},
  url = {https://arxiv.org/abs/2608.10959},
  note = {Source identifier: 2608.10959}
}