LLMs Lost in Translation: M-ALERT uncovers Cross-Linguistic Safety Inconsistencies
Not on the map. Why?
Abstract (arXiv)
Building safe Large Language Models (LLMs) across multiple languages is essential in ensuring both safe access and linguistic diversity. To this end, we conduct a large-scale, comprehensive safety evaluation of the current LLM landscape. For this purpose, we introduce M-ALERT, a multilingual benchmark that evaluates the safety of LLMs in five languages: English, French, German, Italian, and Spanish. M-ALERT includes 15k high-quality prompts per language, totaling 75k, with category-wise annotations. Our extensive experiments on 39 state-of-the-art LLMs highlight the importance of language-specific safety analysis, revealing that models often exhibit significant inconsistencies in safety across languages and categories. For instance, Llama3.2 shows high unsafety in category crime_tax for Italian but remains safe in other languages. Similar inconsistencies can be observed across all models. In contrast, certain categories, such as substance_cannabis and crime_propaganda, consistently trigger unsafe responses across models and languages. These findings underscore the need for robust multilingual safety practices in LLMs to ensure responsible usage across diverse communities.
Key facts. Cited by 6 papers in the map (data through 7 Oct 2026). Builds on 27 of its 44 references that are in the map. First posted on arXiv 19 Dec 2024.
Builds on
27 of 44 references.
References · 27
- 2021On the Opportunities and Risks of Foundation Modelscited by 3,961
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,235
- 2021Ethical and social risks of harm from Language Modelscited by 957
- 2024Moshi: a speech-text foundation model for real-time dialoguecited by 536
- 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 505
- 2018Massively Multilingual Sentence Embeddings for Zero-Shot Cross-Lingual Transfer and Beyondcited by 434
- 2021BOLD: Dataset and Metrics for Measuring Biases in Open-Ended Language Generationcited by 410
- 2021Persistent Anti-Muslim Bias in Large Language Modelscited by 376
- 2023ToxicChat: Unveiling Hidden Challenges of Toxicity Detection in Real-World User-AI Conversationcited by 224
- 2024OR-Bench: An Over-Refusal Benchmark for Large Language Modelscited by 222
- 2021Latent Hatred: A Benchmark for Understanding Implicit Hate Speechcited by 216
- 2023An Overview of Catastrophic AI Riskscited by 214
15 more
- 2023The Capacity for Moral Self-Correction in Large Language Modelscited by 171
- 2023Scaling up COMETKIWI: Unbabel-IST 2023 Submission for the Quality Estimation Shared Taskcited by 88
- 2024The Multilingual Alignment Prism: Aligning Global and Local Preferences to Reduce Harmcited by 67
- 2024Safetywashing: Do AI Safety Benchmarks Actually Measure Safety Progress?cited by 56
- 2023All Languages Matter: On the Multilingual Safety of Large Language Modelscited by 51
- 2024M-RewardBench: Evaluating Reward Models in Multilingual Settingscited by 50
- 2024RTP-LX: Can LLMs Evaluate Toxicity in Multilingual Scenarios?cited by 34
- 2023An Empirical Study of Metrics to Measure Representational Harms in Pre-Trained Language Modelscited by 24
- 2024PolygloToxicityPrompts: Multilingual Evaluation of Neural Toxic Degeneration in Large Language Modelscited by 16
- 2024Multilingual Text-to-Image Generation Magnifies Gender Stereotypes and Prompt Engineering May Not Help Youcited by 15
- 2024Mitigating Metric Bias in Minimum Bayes Risk Decodingcited by 15
- 2024Benchmarking LLM Guardrails in Handling Multilingual Toxicitycited by 13
- 2024From Handcrafted Features to LLMs: A Brief Survey for Machine Translation Quality Estimationcited by 10
- 2024Beyond Correlation: Interpretable Evaluation of Machine Translation Metricscited by 10
- 2023Amplifying Limitations, Harms and Risks of Large Language Modelscited by 4
Built on by
Citing papers per year: 2025: 2; 2026: 4.
6 papers.
- 2025Fine-Tuning Lowers Safety and Disrupts Evaluation Consistencycited by 25
- 2025MPO: Multilingual Safety Alignment via Reward Gap Optimizationcited by 18
- 2026TukaBench: A Culturally Grounded Jailbreak Benchmark for African Languagescited by 3
- 2026Why Do Safety Guardrails Degrade Across Languages?cited by 0
- 2026No Safe Dose: How Training Data Drives Unsafe Image Generationcited by 0
- 2026Language-Specific Gaps in AI Safety Training Datasetscited by 0
- 2026Language-Specific Gaps in AI Safety Training Datasets13 Aug 2026
- 2026TukaBench: A Culturally Grounded Jailbreak Benchmark for African Languages31 May 2026
- 2026No Safe Dose: How Training Data Drives Unsafe Image Generation27 May 2026
- 2026Why Do Safety Guardrails Degrade Across Languages?16 May 2026
- 2025Fine-Tuning Lowers Safety and Disrupts Evaluation Consistency20 Jun 2025
- 2025MPO: Multilingual Safety Alignment via Reward Gap Optimization22 May 2025