C. Zhang, L. Wang, Y. Ma, W. Li, G. Jin, and A. Liu, “Reason2Attack: Jailbreaking Text-to-Image Models via LLM Reasoning”, AAAI, vol. 40, no. 42, pp. 36030–36038, Mar. 2026.