Large Language Models are Easily Confused: A Quantitative Metric, Security Implications and Typological Analysis
Not on the map. Why?
Abstract (arXiv)
Language Confusion is a phenomenon where Large Language Models (LLMs) generate text that is neither in the desired language, nor in a contextually appropriate language. This phenomenon presents a critical challenge in text generation by LLMs, often appearing as erratic and unpredictable behavior. We hypothesize that there are linguistic regularities to this inherent vulnerability in LLMs and shed light on patterns of language confusion across LLMs. We introduce a novel metric, Language Confusion Entropy, designed to directly measure and quantify this confusion, based on language distributions informed by linguistic typology and lexical variation. Comprehensive comparisons with the Language Confusion Benchmark (Marchisio et al., 2024) confirm the effectiveness of our metric, revealing patterns of language confusion across LLMs. We further link language confusion to LLM security, and find patterns in the case of multilingual embedding inversion attacks. Our analysis demonstrates that linguistic typology offers theoretically grounded interpretation, and valuable insights into leveraging language similarities as a prior for LLM alignment and security.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 34 of its 67 references that are in the map. First posted on arXiv 17 Oct 2024.
Builds on
34 of 67 references.
References · 34
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2023GPT-4 Technical Reportcited by 18,132
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2020mT5: A massively multilingual pre-trained text-to-text transformercited by 1,813
- 2018A Call for Clarity in Reporting BLEU Scorescited by 1,790
- 2016Bag of Tricks for Efficient Text Classificationcited by 869
- 2019How multilingual is Multilingual BERT?cited by 642
- 2023Low-Resource Languages Jailbreak GPT-4cited by 290
- 2020Improving Massively Multilingual Neural Machine Translation and Zero-Shot Translationcited by 277
- 2020Information Leakage in Embedding Modelscited by 199
- 2023Okapi: Instruction-tuned Large Language Models in Multiple Languages with Reinforcement Learning from Human Feedbackcited by 189
- 2023Text Embeddings Reveal (Almost) As Much As Textcited by 189
22 more
- 2023Factuality Challenges in the Era of Large Language Modelscited by 125
- 2024Understanding and Mitigating Language Confusion in LLMscited by 75
- 2020Differentially Private Representation for NLP: Formal Guarantee and An Empirical Study on Privacy and Fairnesscited by 66
- 2022Overcoming Catastrophic Forgetting in Zero-Shot Cross-Lingual Generationcited by 62
- 2023Mitigating Hallucinations and Off-target Machine Translation with Source-Contrastive and Language-Contrastive Decodingcited by 42
- 2017Learning Language Representations for Typology Predictioncited by 40
- 2024Text Embedding Inversion Security for Multilingual Language Modelscited by 26
- 2023mmT5: Modular Multilingual Pre-Training Solves Source Language Hallucinationscited by 24
- 2021MTG: A Benchmark Suite for Multilingual Text Generationcited by 22
- 2023Why Does Zero-Shot Cross-Lingual Generation Fail? An Explanation and a Solutioncited by 22
- 2024Multilingual Blending: LLM Safety Alignment Evaluation with Language Mixturecited by 22
- 2016Continuous multilinguality with language vectorscited by 20
- 2019What do Language Representations Really Represent?cited by 17
- 2020fugashi, a Tool for Tokenizing Japanese in Pythoncited by 17
- 2021Conceptual similarity and communicative need shape colexification: an experimental studycited by 14
- 2024TuBA: Cross-Lingual Transferability of Backdoor Attacks in LLMs with Instruction Tuningcited by 13
- 2024Key ingredients for effective zero-shot cross-lingual knowledge transfer in generative taskscited by 11
- 2024Against All Odds: Overcoming Typology, Script, and Language Confusion in Multilingual Embedding Inversion Attackscited by 10
- 2023Language Embeddings Sometimes Contain Typological Generalizationscited by 9
- 2019A Probabilistic Generative Model of Linguistic Typologycited by 8
- 2024Backdoor Attack on Multilingual Machine Translationcited by 5
- 2023Colexifications for Bootstrapping Cross-lingual Datasets: The Case of Phonology, Concreteness, and Affectivenesscited by 2
Built on by
Citing papers per year: 2025: 7.
7 papers.
- 2025Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systemscited by 125
- 2025Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyondcited by 6
- 2025Controlling Language Confusion in Multilingual LLMscited by 3
- 2025Shared Path: Unraveling Memorization in Multilingual LLMs through Language Similaritiescited by 2
- 2025LAGO: Few-shot Crosslingual Embedding Inversion Attacks via Language Similarity-Aware Graph Optimizationcited by 1
- 2025Evaluating Multilingual and Code-Switched Alignment in LLMs via Synthetic Natural Language Inferencecited by 1
- 2025Are the LLMs Capable of Maintaining at Least the Language Genus?cited by 1
- 2025Are the LLMs Capable of Maintaining at Least the Language Genus?24 Oct 2025
- 2025Evaluating Multilingual and Code-Switched Alignment in LLMs via Synthetic Natural Language Inference20 Aug 2025
- 2025Controlling Language Confusion in Multilingual LLMs25 May 2025
- 2025LAGO: Few-shot Crosslingual Embedding Inversion Attacks via Language Similarity-Aware Graph Optimization21 May 2025
- 2025Shared Path: Unraveling Memorization in Multilingual LLMs through Language Similarities21 May 2025
- 2025Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems31 Mar 2025
- 2025Trustworthy Machine Learning via Memorization and the Granular Long-Tail: A Survey on Interactions, Tradeoffs, and Beyond10 Mar 2025
Similar, not cited
Close in wording, no citation either way
- 2026The Implications of Linguistic Illegibility for LLM Security
- 2024Jailbreaking Large Language Models Through Alignment Vulnerabilities in Out-of-Distribution Settings
- 2024Undesirable Memorization in Large Language Models: A Survey
- 2026Is my model perplexed for the right reason? Contrasting LLMs' Benchmark Behavior with Token-Level Perplexity
- 2024The Language Barrier: Dissecting Safety Challenges of LLMs in Multilingual Contexts
- 2025Security Concerns for Large Language Models: A Survey
- 2024BackdoorLLM: A Comprehensive Benchmark for Backdoor Attacks and Defenses on Large Language Models
- 2026LASA: Language-Agnostic Semantic Alignment at the Semantic Bottleneck for LLM Safety