Fine-Tuning, Quantization, and LLMs: Navigating Unintended Outcomes
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
Large Language Models (LLMs) have gained widespread adoption across various domains, including chatbots and auto-task completion agents. However, these models are susceptible to safety vulnerabilities such as jailbreaking, prompt injection, and privacy leakage attacks. These vulnerabilities can lead to the generation of malicious content, unauthorized actions, or the disclosure of confidential information. While foundational LLMs undergo alignment training and incorporate safety measures, they are often subject to fine-tuning, or doing quantization resource-constrained environments. This study investigates the impact of these modifications on LLM safety, a critical consideration for building reliable and secure AI systems. We evaluate foundational models including Mistral, Llama series, Qwen, and MosaicML, along with their fine-tuned variants. Our comprehensive analysis reveals that fine-tuning generally increases the success rates of jailbreak attacks, while quantization has variable effects on attack success rates. Importantly, we find that properly implemented guardrails significantly enhance resistance to jailbreak attempts. These findings contribute to our understanding of LLM vulnerabilities and provide insights for developing more robust safety strategies in the deployment of language models.
Key facts. Cited by 14 papers in the map (data through 7 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 18 of its 18 references that are in the map. First posted on arXiv 5 Apr 2024.
Builds on
18 of 18 references.
Closest ancestors · 1
Same direction, newest first
Other references · 17
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
- 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,339
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,326
- 2023Tree of Attacks: Jailbreaking Black-Box LLMs Automaticallycited by 619
- 2023Jailbreaking ChatGPT via Prompt Engineering: An Empirical Studycited by 478
- 2023NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Railscited by 347
- 2023DeepInception: Hypnotize Large Language Model to Be Jailbreakercited by 337
- 2023Certifying LLM Safety against Adversarial Promptingcited by 248
- 2024Robust Prompt Optimization for Defending Language Models Against Jailbreaking Attackscited by 150
5 more
- 2023ProPILE: Probing Privacy Leakage in Large Language Modelscited by 127
- 2023AutoDAN: Interpretable Gradient-Based Adversarial Attacks on Large Language Modelscited by 102
- 2023Exploring Parameter-Efficient Fine-Tuning Techniques for Code Generation with Large Language Modelscited by 28
- 2020MALCOM: Generating Malicious Comments to Attack Neural Fake News Detection Modelscited by 25
- 2021PETGEN: Personalized Text Generation Attack on Deep Sequence Embedding-based Classification Modelscited by 17
Built on by
Citing papers per year: 2024: 4; 2025: 5; 2026: 5.
14 papers.
Sort:
By area:
- 2024On the Impact of Fine-Tuning on Chain-of-Thought Reasoningcited by 32
- 2024JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Modelscited by 28
- 2024Investigating Implicit Bias in Large Language Models: A Large-Scale Study of Over 50 LLMscited by 25
- 2025Fine-Tuning Lowers Safety and Disrupts Evaluation Consistencycited by 25
- 2024HarmLevelBench: Evaluating Harm-Level Compliance and the Impact of Quantization on Model Alignmentcited by 9
- 2025Accidental Vulnerability: Factors in Fine-Tuning that Shift Model Safeguardscited by 5
- 2026ZipMoE: Efficient On-Device MoE Serving via Lossless Compression and Cache-Affinity Schedulingcited by 4
- 2025Q-resafe: Assessing Safety Risks and Quantization-aware Safety Patching for Quantized Large Language Modelscited by 2
- 2025EAGER: Edge-Aligned LLM Defense for Robust, Efficient, and Accurate Cybersecurity Question Answeringcited by 2
- 2026Lattice: Generative Guardrails for Conversational Agentscited by 1
- 2025SASQ: Static Activation Scaling for Quantization-Aware Training in Large Language Modelscited by 0
- 2026Preserving Fairness and Safety in Quantized LLMs Through Critical Weight Protectioncited by 0
- 2026On the Efficiency-Safety Dilemma in Large Reasoning Models20 Sep 2026
- 2026Gradient-Controlled Decoding: A Safety Guardrail for LLMs with Dual-Anchor Steering6 Apr 2026
- 2026ZipMoE: Efficient On-Device MoE Serving via Lossless Compression and Cache-Affinity Scheduling29 Jan 2026
- 2026Lattice: Generative Guardrails for Conversational Agents24 Jan 2026
- 2026Preserving Fairness and Safety in Quantized LLMs Through Critical Weight Protection17 Jan 2026
- 2025SASQ: Static Activation Scaling for Quantization-Aware Training in Large Language Models16 Dec 2025
- 2025EAGER: Edge-Aligned LLM Defense for Robust, Efficient, and Accurate Cybersecurity Question Answering24 Nov 2025
- 2025Q-resafe: Assessing Safety Risks and Quantization-aware Safety Patching for Quantized Large Language Models25 Jun 2025
- 2025Fine-Tuning Lowers Safety and Disrupts Evaluation Consistency20 Jun 2025
- 2025Accidental Vulnerability: Factors in Fine-Tuning that Shift Model Safeguards22 May 2025
- 2024On the Impact of Fine-Tuning on Chain-of-Thought Reasoning22 Nov 2024
- 2024HarmLevelBench: Evaluating Harm-Level Compliance and the Impact of Quantization on Model Alignment11 Nov 2024
- 2024JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Modelscited by 28
- 2025Fine-Tuning Lowers Safety and Disrupts Evaluation Consistencycited by 25
- 2026Lattice: Generative Guardrails for Conversational Agentscited by 1
- 2026Gradient-Controlled Decoding: A Safety Guardrail for LLMs with Dual-Anchor Steeringcited by 0
- 2026Gradient-Controlled Decoding: A Safety Guardrail for LLMs with Dual-Anchor Steering6 Apr 2026
- 2026Lattice: Generative Guardrails for Conversational Agents24 Jan 2026
- 2025Fine-Tuning Lowers Safety and Disrupts Evaluation Consistency20 Jun 2025
- 2024JailbreakEval: An Integrated Toolkit for Evaluating Jailbreak Attempts Against Large Language Models13 Jun 2024
- 2024On the Impact of Fine-Tuning on Chain-of-Thought Reasoningcited by 32
- 2026On the Efficiency-Safety Dilemma in Large Reasoning Modelscited by 0
- 2026On the Efficiency-Safety Dilemma in Large Reasoning Models20 Sep 2026
- 2024On the Impact of Fine-Tuning on Chain-of-Thought Reasoning22 Nov 2024
- 2024Investigating Implicit Bias in Large Language Models: A Large-Scale Study of Over 50 LLMscited by 25
- 2025Accidental Vulnerability: Factors in Fine-Tuning that Shift Model Safeguardscited by 5
- 2025Q-resafe: Assessing Safety Risks and Quantization-aware Safety Patching for Quantized Large Language Modelscited by 2
- 2025SASQ: Static Activation Scaling for Quantization-Aware Training in Large Language Modelscited by 0
- 2026Preserving Fairness and Safety in Quantized LLMs Through Critical Weight Protectioncited by 0
- 2026Preserving Fairness and Safety in Quantized LLMs Through Critical Weight Protection17 Jan 2026
- 2025SASQ: Static Activation Scaling for Quantization-Aware Training in Large Language Models16 Dec 2025
- 2025Q-resafe: Assessing Safety Risks and Quantization-aware Safety Patching for Quantized Large Language Models25 Jun 2025
- 2025Accidental Vulnerability: Factors in Fine-Tuning that Shift Model Safeguards22 May 2025
- 2024Investigating Implicit Bias in Large Language Models: A Large-Scale Study of Over 50 LLMs13 Oct 2024