Multimodal Situational Safety
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
Abstract (arXiv)
Multimodal Large Language Models (MLLMs) are rapidly evolving, demonstrating impressive capabilities as multimodal assistants that interact with both humans and their environments. However, this increased sophistication introduces significant safety concerns. In this paper, we present the first evaluation and analysis of a novel safety challenge termed Multimodal Situational Safety, which explores how safety considerations vary based on the specific situation in which the user or agent is engaged. We argue that for an MLLM to respond safely, whether through language or action, it often needs to assess the safety implications of a language query within its corresponding visual context. To evaluate this capability, we develop the Multimodal Situational Safety benchmark (MSSBench) to assess the situational safety performance of current MLLMs. The dataset comprises 1,820 language query-image pairs, half of which the image context is safe, and the other half is unsafe. We also develop an evaluation framework that analyzes key safety aspects, including explicit safety reasoning, visual understanding, and, crucially, situational safety reasoning. Our findings reveal that current MLLMs struggle with this nuanced safety problem in the instruction-following setting and struggle to tackle these situational safety challenges all at once, highlighting a key area for future research. Furthermore, we develop multi-agent pipelines to coordinately solve safety challenges, which shows consistent improvement in safety over the original MLLM response. Code and data: mssbench.github.io.
Key facts. Cited by 54 papers in the map (data through 7 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. First posted on arXiv 8 Oct 2024.
Builds on
0 of 0 references.
No references here yet.
Built on by
Citing papers per year: 2025: 32; 2026: 22.
54 papers.
Sort:
By area:
- 2025A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluationscited by 66
- 2025VPI-Bench: Visual Prompt Injection Attacks for Computer-Use Agentscited by 42
- 2025IS-Bench: Evaluating Interactive Safety of VLM-Driven Embodied Agents in Daily Household Taskscited by 40
- 2025Safety Guardrails for LLM-Enabled Robotscited by 30
- 2025Rethinking Bottlenecks in Safety Fine-Tuning of Vision Language Modelscited by 21
- 2025Think in Safety: Unveiling and Mitigating Safety Alignment Collapse in Multimodal Large Reasoning Modelcited by 18
- 2025Safety Mirage: How Spurious Correlations Undermine VLM Safety Fine-Tuning and Can Be Mitigated by Machine Unlearningcited by 16
- 2026Uncertainty Quantification in LLM Agents: Foundations, Emerging Challenges, and Opportunitiescited by 15
- 2025Generative RLHF-V: Learning Principles from Multi-modal Human Preferencecited by 13
- 2025SafeMind: Benchmarking and Mitigating Safety Risks in Embodied LLM Agentscited by 13
- 2025Can AI Perceive Physical Danger and Intervene?cited by 12
- 2025USB: A Comprehensive and Unified Safety Evaluation Benchmark for Multimodal Large Language Modelscited by 10
38 more
- 2025Praxis-VLM: Vision-Grounded Decision Making via Text-Driven Reinforcement Learningcited by 9
- 2025Multimodal Cultural Safety: Evaluation Framework and Alignment Strategiescited by 8
- 2025AccidentBench: Benchmarking Multimodal Understanding and Reasoning in Vehicle Accidents and Beyondcited by 8
- 2025SaFeR-VLM: Toward Safety-aware Fine-grained Reasoning in Multimodal Modelscited by 8
- 2025Towards Evaluating Proactive Risk Awareness of Multimodal Language Modelscited by 6
- 2025HoliSafe: Holistic Safety Benchmarking and Modeling for Vision-Language Modelcited by 6
- 2025Steering Multimodal Large Language Models Decoding for Context-Aware Safetycited by 6
- 2026Towards Policy-Adaptive Image Guardrail: Benchmark and Methodcited by 6
- 2025ShieldVLM: Safeguarding the Multimodal Implicit Toxicity via Deliberative Reasoning with LVLMscited by 5
- 2025Seeing the Threat: Vulnerabilities in Vision-Language Models to Adversarial Attackcited by 5
- 2026Evolving Contextual Safety in Multi-Modal Large Language Models via Inference-Time Self-Reflective Memorycited by 5
- 2025PandaGuard: Systematic Evaluation of LLM Safety against Jailbreaking Attackscited by 4
- 2026SAVeS: Steering Safety Judgments in Vision-Language Models via Semantic Cuescited by 4
- 2025Beyond Jailbreaks: Revealing Stealthier and Broader LLM Security Risks Stemming from Alignment Failurescited by 3
- 2025SafeCoT: Improving VLM Safety with Minimal Reasoningcited by 3
- 2025SIA: Enhancing Safety via Intent Awareness for Vision-Language Modelscited by 3
- 2025Protect: Towards Robust Guardrailing Stack for Trustworthy Enterprise LLM Systemscited by 3
- 2026ForesightSafety Bench: A Frontier Risk Evaluation and Governance Framework towards Safe AIcited by 3
- 2026Pragma-VL: Towards a Pragmatic Arbitration of Safety and Helpfulness in MLLMscited by 3
- 2026HomeGuard: VLM-based Embodied Safeguard for Identifying Contextual Risk in Household Taskcited by 3
- 2025Beyond External Monitors: Enhancing Transparency of Large Language Models for Easier Monitoringcited by 2
- 2025PRISM: Robust VLM Alignment with Principled Reasoning for Integrated Safety in Multimodalitycited by 2
- 2025Falcon: A Cross-Modal Evaluation Dataset for Comprehensive Safety Perceptioncited by 2
- 2026The Side Effects of Being Smart: Safety Risks in MLLMs' Multi-Image Reasoningcited by 2
- 2025MDIT-Bench: Evaluating the Dual-Implicit Toxicity in Large Multimodal Modelscited by 1
- 2025Think-Reflect-Revise: A Policy-Guided Reflective Framework for Safety Alignment in Large Vision Language Modelscited by 1
- 2026If you're waiting for a sign... that might not be it! Mitigating Trust Boundary Confusion from Visual Injections on Vision-Language Agentic Systemscited by 1
- 2026MCBench: A Multicontext Safety Assessment Benchmark for Omni Large Language Modelscited by 1
- 2025VIVA+: Human-Centered Situational Decision-Makingcited by 0
- 2025Visual Attention Reasoning via Hierarchical Search and Self-Verificationcited by 0
- 2026MM-SCALE: Grounded Multimodal Moral Reasoning via Scalar Judgment and Listwise Alignmentcited by 0
- 2026SaFeR-ToolKit: Structured Reasoning via Virtual Tool Calling for Multimodal Safetycited by 0
- 2026OOD-MMSafe: Advancing MLLM Safety from Harmful Intent to Hidden Consequencescited by 0
- 2026RobotValues: Evaluating Household Robots When Human Values Conflictcited by 0
- 2026Beyond Attack Success Rate: Examining Trigger Leakage in Vision-Language Agentic Systemscited by 0
- 2026Self-Evolving Just-In-Time Memory for Proactive Embodied Safetycited by 0
- 2026Multimodal Model Diffing for Feature Discovery and Controlcited by 0
- 2026Distributed Implicit Harm: A Compositional Safety Blind Spot in MLLM-Based Video Moderationcited by 0
50 most cited of 54 All 54 (JSON)
- 2026Can Vision-Language Models Stay Helpful When Facing Implicit Risks? Intent-Privilege OPSD for Efficient Safety-Helpfulness Alignment29 Sep 2026
- 2026ThinkingGuard: Decoding Implicit Hazards via Step-by-Step Risk Attribution in Multimodal Large Language Models29 Sep 2026
- 2026A2Safe: Counterfactual Evidence-Aligned Adaptive Agent Collaboration for Safe and Effective Visual Question Answering21 Sep 2026
- 2026Distributed Implicit Harm: A Compositional Safety Blind Spot in MLLM-Based Video Moderation31 Aug 2026
- 2026Multimodal Model Diffing for Feature Discovery and Control10 Aug 2026
- 2026MME-Safety: A Fine-grained Benchmark for Safety Evaluation of MLLMs8 Aug 2026
- 2026Self-Evolving Just-In-Time Memory for Proactive Embodied Safety26 Jun 2026
- 2026Beyond Attack Success Rate: Examining Trigger Leakage in Vision-Language Agentic Systems10 Jun 2026
- 2026RobotValues: Evaluating Household Robots When Human Values Conflict2 Jun 2026
- 2026If you're waiting for a sign... that might not be it! Mitigating Trust Boundary Confusion from Visual Injections on Vision-Language Agentic Systems21 Apr 2026
- 2026MCBench: A Multicontext Safety Assessment Benchmark for Omni Large Language Models17 Apr 2026
- 2026SAVeS: Steering Safety Judgments in Vision-Language Models via Semantic Cues19 Mar 2026
38 more
- 2026Evolving Contextual Safety in Multi-Modal Large Language Models via Inference-Time Self-Reflective Memory16 Mar 2026
- 2026HomeGuard: VLM-based Embodied Safeguard for Identifying Contextual Risk in Household Task15 Mar 2026
- 2026OOD-MMSafe: Advancing MLLM Safety from Harmful Intent to Hidden Consequences10 Mar 2026
- 2026SaFeR-ToolKit: Structured Reasoning via Virtual Tool Calling for Multimodal Safety3 Mar 2026
- 2026Towards Policy-Adaptive Image Guardrail: Benchmark and Method1 Mar 2026
- 2026Pragma-VL: Towards a Pragmatic Arbitration of Safety and Helpfulness in MLLMs28 Feb 2026
- 2026ForesightSafety Bench: A Frontier Risk Evaluation and Governance Framework towards Safe AI15 Feb 2026
- 2026Uncertainty Quantification in LLM Agents: Foundations, Emerging Challenges, and Opportunities4 Feb 2026
- 2026MM-SCALE: Grounded Multimodal Moral Reasoning via Scalar Judgment and Listwise Alignment3 Feb 2026
- 2026The Side Effects of Being Smart: Safety Risks in MLLMs' Multi-Image Reasoning20 Jan 2026
- 2025Think-Reflect-Revise: A Policy-Guided Reflective Framework for Safety Alignment in Large Vision Language Models8 Dec 2025
- 2025Visual Attention Reasoning via Hierarchical Search and Self-Verification21 Oct 2025
- 2025Protect: Towards Robust Guardrailing Stack for Trustworthy Enterprise LLM Systems15 Oct 2025
- 2025SaFeR-VLM: Toward Safety-aware Fine-grained Reasoning in Multimodal Models8 Oct 2025
- 2025AccidentBench: Benchmarking Multimodal Understanding and Reasoning in Vehicle Accidents and Beyond30 Sep 2025
- 2025SafeMind: Benchmarking and Mitigating Safety Risks in Embodied LLM Agents30 Sep 2025
- 2025Falcon: A Cross-Modal Evaluation Dataset for Comprehensive Safety Perception28 Sep 2025
- 2025VIVA+: Human-Centered Situational Decision-Making28 Sep 2025
- 2025Can AI Perceive Physical Danger and Intervene?25 Sep 2025
- 2025Steering Multimodal Large Language Models Decoding for Context-Aware Safety23 Sep 2025
- 2025PRISM: Robust VLM Alignment with Principled Reasoning for Integrated Safety in Multimodality26 Aug 2025
- 2025SIA: Enhancing Safety via Intent Awareness for Vision-Language Models21 Jul 2025
- 2025IS-Bench: Evaluating Interactive Safety of VLM-Driven Embodied Agents in Daily Household Tasks19 Jun 2025
- 2025SafeCoT: Improving VLM Safety with Minimal Reasoning10 Jun 2025
- 2025Beyond Jailbreaks: Revealing Stealthier and Broader LLM Security Risks Stemming from Alignment Failures9 Jun 2025
- 2025HoliSafe: Holistic Safety Benchmarking and Modeling for Vision-Language Model5 Jun 2025
- 2025VPI-Bench: Visual Prompt Injection Attacks for Computer-Use Agents3 Jun 2025
- 2025Seeing the Threat: Vulnerabilities in Vision-Language Models to Adversarial Attack28 May 2025
- 2025USB: A Comprehensive and Unified Safety Evaluation Benchmark for Multimodal Large Language Models26 May 2025
- 2025Generative RLHF-V: Learning Principles from Multi-modal Human Preference24 May 2025
- 2025Towards Evaluating Proactive Risk Awareness of Multimodal Language Models23 May 2025
- 2025MDIT-Bench: Evaluating the Dual-Implicit Toxicity in Large Multimodal Models22 May 2025
- 2025Multimodal Cultural Safety: Evaluation Framework and Alignment Strategies20 May 2025
- 2025ShieldVLM: Safeguarding the Multimodal Implicit Toxicity via Deliberative Reasoning with LVLMs20 May 2025
- 2025PandaGuard: Systematic Evaluation of LLM Safety against Jailbreaking Attacks20 May 2025
- 2025Think in Safety: Unveiling and Mitigating Safety Alignment Collapse in Multimodal Large Reasoning Model10 May 2025
- 2025Praxis-VLM: Vision-Grounded Decision Making via Text-Driven Reinforcement Learning21 Mar 2025
- 2025Safety Mirage: How Spurious Correlations Undermine VLM Safety Fine-Tuning and Can Be Mitigated by Machine Unlearning14 Mar 2025
50 newest of 54 All 54 (JSON)
- 2025A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluationscited by 66
- 2025Safety Mirage: How Spurious Correlations Undermine VLM Safety Fine-Tuning and Can Be Mitigated by Machine Unlearningcited by 16
- 2025Generative RLHF-V: Learning Principles from Multi-modal Human Preferencecited by 13
- 2025USB: A Comprehensive and Unified Safety Evaluation Benchmark for Multimodal Large Language Modelscited by 10
- 2025Multimodal Cultural Safety: Evaluation Framework and Alignment Strategiescited by 8
- 2025Towards Evaluating Proactive Risk Awareness of Multimodal Language Modelscited by 6
- 2025HoliSafe: Holistic Safety Benchmarking and Modeling for Vision-Language Modelcited by 6
- 2025Steering Multimodal Large Language Models Decoding for Context-Aware Safetycited by 6
- 2025Seeing the Threat: Vulnerabilities in Vision-Language Models to Adversarial Attackcited by 5
- 2026SAVeS: Steering Safety Judgments in Vision-Language Models via Semantic Cuescited by 4
- 2025SIA: Enhancing Safety via Intent Awareness for Vision-Language Modelscited by 3
- 2026Pragma-VL: Towards a Pragmatic Arbitration of Safety and Helpfulness in MLLMscited by 3
12 most cited of 23 All 23 (JSON)
- 2026Can Vision-Language Models Stay Helpful When Facing Implicit Risks? Intent-Privilege OPSD for Efficient Safety-Helpfulness Alignment29 Sep 2026
- 2026A2Safe: Counterfactual Evidence-Aligned Adaptive Agent Collaboration for Safe and Effective Visual Question Answering21 Sep 2026
- 2026Distributed Implicit Harm: A Compositional Safety Blind Spot in MLLM-Based Video Moderation31 Aug 2026
- 2026Multimodal Model Diffing for Feature Discovery and Control10 Aug 2026
- 2026MME-Safety: A Fine-grained Benchmark for Safety Evaluation of MLLMs8 Aug 2026
- 2026Self-Evolving Just-In-Time Memory for Proactive Embodied Safety26 Jun 2026
- 2026If you're waiting for a sign... that might not be it! Mitigating Trust Boundary Confusion from Visual Injections on Vision-Language Agentic Systems21 Apr 2026
- 2026SAVeS: Steering Safety Judgments in Vision-Language Models via Semantic Cues19 Mar 2026
- 2026HomeGuard: VLM-based Embodied Safeguard for Identifying Contextual Risk in Household Task15 Mar 2026
- 2026OOD-MMSafe: Advancing MLLM Safety from Harmful Intent to Hidden Consequences10 Mar 2026
- 2026Pragma-VL: Towards a Pragmatic Arbitration of Safety and Helpfulness in MLLMs28 Feb 2026
- 2025VIVA+: Human-Centered Situational Decision-Making28 Sep 2025
12 newest of 23 All 23 (JSON)
- 2025Rethinking Bottlenecks in Safety Fine-Tuning of Vision Language Modelscited by 21
- 2025Think in Safety: Unveiling and Mitigating Safety Alignment Collapse in Multimodal Large Reasoning Modelcited by 18
- 2025Praxis-VLM: Vision-Grounded Decision Making via Text-Driven Reinforcement Learningcited by 9
- 2025SaFeR-VLM: Toward Safety-aware Fine-grained Reasoning in Multimodal Modelscited by 8
- 2025ShieldVLM: Safeguarding the Multimodal Implicit Toxicity via Deliberative Reasoning with LVLMscited by 5
- 2026Evolving Contextual Safety in Multi-Modal Large Language Models via Inference-Time Self-Reflective Memorycited by 5
- 2025SafeCoT: Improving VLM Safety with Minimal Reasoningcited by 3
- 2025PRISM: Robust VLM Alignment with Principled Reasoning for Integrated Safety in Multimodalitycited by 2
- 2026The Side Effects of Being Smart: Safety Risks in MLLMs' Multi-Image Reasoningcited by 2
- 2025Think-Reflect-Revise: A Policy-Guided Reflective Framework for Safety Alignment in Large Vision Language Modelscited by 1
- 2025Visual Attention Reasoning via Hierarchical Search and Self-Verificationcited by 0
- 2026MM-SCALE: Grounded Multimodal Moral Reasoning via Scalar Judgment and Listwise Alignmentcited by 0
12 most cited of 14 All 14 (JSON)
- 2026ThinkingGuard: Decoding Implicit Hazards via Step-by-Step Risk Attribution in Multimodal Large Language Models29 Sep 2026
- 2026Evolving Contextual Safety in Multi-Modal Large Language Models via Inference-Time Self-Reflective Memory16 Mar 2026
- 2026SaFeR-ToolKit: Structured Reasoning via Virtual Tool Calling for Multimodal Safety3 Mar 2026
- 2026MM-SCALE: Grounded Multimodal Moral Reasoning via Scalar Judgment and Listwise Alignment3 Feb 2026
- 2026The Side Effects of Being Smart: Safety Risks in MLLMs' Multi-Image Reasoning20 Jan 2026
- 2025Think-Reflect-Revise: A Policy-Guided Reflective Framework for Safety Alignment in Large Vision Language Models8 Dec 2025
- 2025Visual Attention Reasoning via Hierarchical Search and Self-Verification21 Oct 2025
- 2025SaFeR-VLM: Toward Safety-aware Fine-grained Reasoning in Multimodal Models8 Oct 2025
- 2025PRISM: Robust VLM Alignment with Principled Reasoning for Integrated Safety in Multimodality26 Aug 2025
- 2025SafeCoT: Improving VLM Safety with Minimal Reasoning10 Jun 2025
- 2025ShieldVLM: Safeguarding the Multimodal Implicit Toxicity via Deliberative Reasoning with LVLMs20 May 2025
- 2025Think in Safety: Unveiling and Mitigating Safety Alignment Collapse in Multimodal Large Reasoning Model10 May 2025
12 newest of 14 All 14 (JSON)
- 2025VPI-Bench: Visual Prompt Injection Attacks for Computer-Use Agentscited by 42
- 2025IS-Bench: Evaluating Interactive Safety of VLM-Driven Embodied Agents in Daily Household Taskscited by 40
- 2026Uncertainty Quantification in LLM Agents: Foundations, Emerging Challenges, and Opportunitiescited by 15
- 2025SafeMind: Benchmarking and Mitigating Safety Risks in Embodied LLM Agentscited by 13
- 2026Beyond Attack Success Rate: Examining Trigger Leakage in Vision-Language Agentic Systemscited by 0
- 2026Beyond Attack Success Rate: Examining Trigger Leakage in Vision-Language Agentic Systems10 Jun 2026
- 2026Uncertainty Quantification in LLM Agents: Foundations, Emerging Challenges, and Opportunities4 Feb 2026
- 2025SafeMind: Benchmarking and Mitigating Safety Risks in Embodied LLM Agents30 Sep 2025
- 2025IS-Bench: Evaluating Interactive Safety of VLM-Driven Embodied Agents in Daily Household Tasks19 Jun 2025
- 2025VPI-Bench: Visual Prompt Injection Attacks for Computer-Use Agents3 Jun 2025
- 2025Can AI Perceive Physical Danger and Intervene?cited by 12
- 2025AccidentBench: Benchmarking Multimodal Understanding and Reasoning in Vehicle Accidents and Beyondcited by 8
- 2026ForesightSafety Bench: A Frontier Risk Evaluation and Governance Framework towards Safe AIcited by 3
- 2025Beyond External Monitors: Enhancing Transparency of Large Language Models for Easier Monitoringcited by 2
- 2025Falcon: A Cross-Modal Evaluation Dataset for Comprehensive Safety Perceptioncited by 2
- 2026MCBench: A Multicontext Safety Assessment Benchmark for Omni Large Language Modelscited by 1
- 2026RobotValues: Evaluating Household Robots When Human Values Conflictcited by 0
- 2026RobotValues: Evaluating Household Robots When Human Values Conflict2 Jun 2026
- 2026MCBench: A Multicontext Safety Assessment Benchmark for Omni Large Language Models17 Apr 2026
- 2026ForesightSafety Bench: A Frontier Risk Evaluation and Governance Framework towards Safe AI15 Feb 2026
- 2025AccidentBench: Benchmarking Multimodal Understanding and Reasoning in Vehicle Accidents and Beyond30 Sep 2025
- 2025Falcon: A Cross-Modal Evaluation Dataset for Comprehensive Safety Perception28 Sep 2025
- 2025Can AI Perceive Physical Danger and Intervene?25 Sep 2025
- 2025Beyond External Monitors: Enhancing Transparency of Large Language Models for Easier Monitoring7 Feb 2025
Similar, not cited
Close in wording, no citation either way
- 2026When Helpers Become Hazards: A Benchmark for Analyzing Multimodal LLM-Powered Safety in Daily Life
- 2025Can't See the Forest for the Trees: Benchmarking Multimodal Safety Awareness for Multimodal LLMs
- 2026MTMCS-Bench: Evaluating Contextual Safety of Multimodal Large Language Models in Multi-Turn Dialogues
- 2026Transfer Safety Awareness for Cross-Modal Safety Drift in Multimodal Large Language Models
- 2025MSTS: A Multimodal Safety Test Suite for Vision-Language Models
- 2026CSR-Bench: A Benchmark for Evaluating the Cross-modal Safety and Reliability of MLLMs
- 2025SafeMT: Multi-turn Safety for Multimodal Language Models
- 2026MLLMs Fail to Refuse when Using Tools Agentically