ReaLM - ImageMix: leaderboard

ReaLM (2026) is a red-teaming benchmark for physical-world vision-language models on 832 driving, manipulation, grasping, physics, egocentric, diagnostic and scene cases, attacked black-box toward scenario-specific failure targets. This board is the attack success rate under ImageMix, the target image alpha-blended into the source: the percent of attacked cases answered incorrectly; lower is better.

Metric: Attack success rate (%; share of adversarial cases where the model gives an incorrect, task-relevant answer) under ImageMix (source and target images alpha-blended) on the 832 ReaLM physical-world cases (driving, manipulation, grasping, physics, egocentric, diagnostics and scene QA; image, question and ground-truth answer), black-box one-shot evaluation at temperature 0, a Qwen3-8B judge extracting the answer; lower is better. Source: arxiv.org. Saturation forecast: Around September 2027. 13 models tracked.

Top models

#ModelScoreOverall rank
1Qwen 3.5 122B A10B41.5#331
2Qwen 3.5 27B42.1#359
3Seed 2.0 Mini42.5#508
4Kimi K2.543#256
5Qwen 3.6 Flash44.1#424
6Gemini 3 Flash44.8#164
7Qwen 3.5 9B45.9#803
8GPT-4.1 Mini46.5#779

No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.

Interactive version: theaggregate.ai/benchmark?slug=realm-imagemix · How It Works · Data refreshed daily, snapshot 2026-11-13.