How Does Vision-Language Adaptation Impact the Safety of Vision Language Models?
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
Abstract (arXiv)
Vision-Language adaptation (VL adaptation) transforms Large Language Models (LLMs) into Large Vision-Language Models (LVLMs) for multimodal tasks, but this process often compromises the inherent safety capabilities embedded in the original LLMs. Despite potential harmfulness due to weakened safety measures, in-depth analysis on the effects of VL adaptation on safety remains under-explored. This study examines how VL adaptation influences safety and evaluates the impact of safety fine-tuning methods. Our analysis reveals that safety degradation occurs during VL adaptation, even when the training data is safe. While safety tuning techniques like supervised fine-tuning with safety datasets or reinforcement learning from human feedback mitigate some risks, they still lead to safety degradation and a reduction in helpfulness due to over-rejection issues. Further analysis of internal model weights suggests that VL adaptation may impact certain safety-related layers, potentially lowering overall safety levels. Additionally, our findings demonstrate that the objectives of VL adaptation and safety tuning are divergent, which often results in their simultaneous application being suboptimal. To address this, we suggest the weight merging approach as an optimal solution effectively reducing safety degradation while maintaining helpfulness. These insights help guide the development of more reliable and secure LVLMs for real-world applications.
Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 45 of its 52 references that are in the map. First posted on arXiv 10 Oct 2024.
Builds on
45 of 52 references.
Closest ancestors · 5
Same direction, newest first
- 2024Safe Inputs but Unsafe Output: Benchmarking Cross-modality Safety Alignment of Large Vision-Language Model21 Jun
- 2024SPA-VL: A Comprehensive Safety Preference Alignment Dataset for Vision Language Model17 Jun
- 2024Learning To See But Forgetting To Follow: Visual Instruction Tuning Makes LLMs More Prone To Jailbreak Attacks7 May
- 2023MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models29 Nov
- 2023FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts9 Nov
Other references · 40
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2017Proximal Policy Optimization Algorithmscited by 14,441
- 2021Training Verifiers to Solve Math Word Problemscited by 9,743
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,069
- 2023Improved Baselines with Visual Instruction Tuningcited by 4,362
- 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,018
- 2017Deep reinforcement learning from human preferencescited by 3,846
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,895
28 more
- 2023MMBench: Is Your Multi-modal Model an All-around Player?cited by 2,105
- 2023MME: A Comprehensive Evaluation Benchmark for Multimodal Large Language Modelscited by 1,624
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
- 2022Model soups: averaging weights of multiple fine-tuned models improves accuracy without increasing inference timecited by 1,366
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,106
- 2022Editing Models with Task Arithmeticcited by 1,076
- 2024MiniCPM-V: A GPT-4V Level MLLM on Your Phonecited by 1,061
- 2023SEED-Bench: Benchmarking Multimodal LLMs with Generative Comprehensioncited by 929
- 2018XNLI: Evaluating Cross-lingual Sentence Representationscited by 913
- 2023TIES-Merging: Resolving Interference When Merging Modelscited by 795
- 2023Language Models are Super Mario: Absorbing Abilities from Homologous Models as a Free Lunchcited by 679
- 2023The Dawn of LMMs: Preliminary Explorations with GPT-4V(ision)cited by 677
- 2023Safe RLHF: Safe Reinforcement Learning from Human Feedbackcited by 630
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 477
- 2024Prometheus 2: An Open Source Language Model Specialized in Evaluating Other Language Modelscited by 431
- 2023OBELICS: An Open Web-Scale Filtered Dataset of Interleaved Image-Text Documentscited by 316
- 2023Camels in a Changing Climate: Enhancing LM Adaptation with Tulu 2cited by 227
- 2024SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusalcited by 224
- 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Modelscited by 206
- 2024Evolutionary Optimization of Model Merging Recipescited by 204
- 2024Safety Fine-Tuning at (Almost) No Cost: A Baseline for Vision Large Language Modelscited by 160
- 2024Safety Layers in Aligned Large Language Models: The Key to LLM Securitycited by 126
- 2024Model Stock: All we need is just a few fine-tuned modelscited by 87
- 2024WildVision: Evaluating Vision-Language Models in the Wild with Human Preferencescited by 76
- 2024Vision-Flan: Scaling Human-Labeled Tasks in Visual Instruction Tuningcited by 73
- 2023Learning and Forgetting Unsafe Examples in Large Language Modelscited by 24
- 2024On Efficient Language and Vision Assistants for Visually-Situated Natural Language Understanding: What Matters in Reading and Reasoningcited by 7
Built on by
Citing papers per year: 2025: 5; 2026: 3.
8 papers.
- 2025A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluationscited by 66
- 2025Think in Safety: Unveiling and Mitigating Safety Alignment Collapse in Multimodal Large Reasoning Modelcited by 18
- 2025Is Extending Modality The Right Path Towards Omni-Modality?cited by 4
- 2026Decentralized Instruction Tuning: Conflict-Aware Splitting and Weight Mergingcited by 2
- 2026StethoLM: Audio Language Model for Cardiopulmonary Analysis Across Clinical Taskscited by 1
- 2025Security Tensors as a Cross-Modal Bridge: Extending Text-Aligned Safety to Vision in LVLMcited by 0
- 2025FoCLIP: A Feature-Space Misalignment Framework for CLIP-Based Image Manipulation and Detectioncited by 0
- 2026SafeMol: Dual-Modality Safety Alignment for Molecular Multimodal Modelscited by 0
- 2026SafeMol: Dual-Modality Safety Alignment for Molecular Multimodal Models27 Sep 2026
- 2026Decentralized Instruction Tuning: Conflict-Aware Splitting and Weight Merging1 Jun 2026
- 2026StethoLM: Audio Language Model for Cardiopulmonary Analysis Across Clinical Tasks27 Feb 2026
- 2025FoCLIP: A Feature-Space Misalignment Framework for CLIP-Based Image Manipulation and Detection10 Nov 2025
- 2025Security Tensors as a Cross-Modal Bridge: Extending Text-Aligned Safety to Vision in LVLM28 Jul 2025
- 2025Is Extending Modality The Right Path Towards Omni-Modality?2 Jun 2025
- 2025Think in Safety: Unveiling and Mitigating Safety Alignment Collapse in Multimodal Large Reasoning Model10 May 2025
- 2025A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations14 Feb 2025
Similar, not cited
Close in wording, no citation either way
- 2025Safe Vision-Language Models via Unsafe Weights Manipulation
- 2024Safety Alignment for Vision Language Models
- 2025Rethinking Bottlenecks in Safety Fine-Tuning of Vision Language Models
- 2024PSA-VLM: Enhancing Vision-Language Model Safety through Progressive Concept-Bottleneck-Driven Alignment
- 2025HoliSafe: Holistic Safety Benchmarking and Modeling for Vision-Language Model
- 2025VSCBench: Bridging the Gap in Vision-Language Model Safety Calibration
- 2026Targeted Interpretable Safety Neuron Enhancement for Multilingual Vision-Language Large Models
- 2026A Safety Report on GPT-5.2, Gemini 3 Pro, Qwen3-VL, Grok 4.1 Fast, Nano Banana Pro, and Seedream 4.5