@misc{indiciae5a778456a409,
  title = {Visually Legible but Adversarial: Watermark-Constrained Attacks on End-to-End VLMs for Document Understanding},
  author = {Qingzhe Han and Fan Dang and Shengqi Chen and Xinyi Sun and Haoyu Xiong and Lingkun Li and Di Zhang},
  year = {2026},
  url = {https://arxiv.org/abs/2610.15728},
  note = {Source identifier: 2610.15728}
}