mlsanityData to 14 Oct 2026

NeuRel-Attack: Neuron Relearning for Safety Disalignment in Large Language Models

arXiv 2504.21053 ↗First posted 29 Apr 2025cs.LG cs.AIcited by 6

On the map: LLM alignment / RLHF / preference optimisation → Safety alignment and jailbreak attacks

also in 1 more
Abstract (arXiv)

Safety alignment in large language models (LLMs) is achieved through fine-tuning mechanisms that regulate neuron activations to suppress harmful content. In this work, we propose a novel approach to induce disalignment by identifying and modifying the neurons responsible for safety constraints. Our method consists of three key steps: Neuron Activation Analysis, where we examine activation patterns in response to harmful and harmless prompts to detect neurons that are critical for distinguishing between harmful and harmless inputs; Similarity-Based Neuron Identification, which systematically locates the neurons responsible for safe alignment; and Neuron Relearning for Safety Removal, where we fine-tune these selected neurons to restore the model's ability to generate previously restricted responses. Experimental results demonstrate that our method effectively removes safety constraints with minimal fine-tuning, highlighting a critical vulnerability in current alignment techniques. Our findings underscore the need for robust defenses against adversarial fine-tuning attacks on LLMs.

Key facts. Cited by 6 papers in the map (data through 14 Oct 2026). Placed in Safety alignment and jailbreak attacks, one of 10 directions in LLM alignment / RLHF / preference optimisation. Builds on 19 of its 28 references that are in the map. First posted on arXiv 29 Apr 2025.

Builds on

19 of 28 references.

Closest ancestors · 5

Same direction, newest first

  1. 2024DrAttack: Prompt Decomposition and Reconstruction Makes Powerful LLM Jailbreakers25 Feb
  2. 2024Emulated Disalignment: Safety Alignment for Large Language Models May Backfire!19 Feb
  3. 2023LoRA Fine-tuning Efficiently Undoes Safety Training in Llama 2-Chat 70B31 Oct
  4. 2023GPT-4 Is Too Smart To Be Safe: Stealthy Chat with LLMs via Cipher12 Aug
  5. 2023Universal and Transferable Adversarial Attacks on Aligned Language Models27 Jul

Other references · 14

  1. 2022Training language models to follow instructions with human feedbackcited by 15,971
  2. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  3. 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,780
  4. 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,418
  5. 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
  6. 2024How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMscited by 573
  7. 2023GPTFUZZER: Red Teaming Large Language Models with Auto-Generated Jailbreak Promptscited by 560
  8. 2023Catastrophic Jailbreak of Open-source LLMs via Exploiting Generationcited by 451
  9. 2023Hard Prompts Made Easy: Gradient-Based Discrete Optimization for Prompt Tuning and Discoverycited by 336
  10. 2023Exploiting Programmatic Behavior of LLMs: Dual-Use Through Standard Security Attackscited by 278
  11. 2023MasterKey: Automated Jailbreak Across Multiple Large Language Model Chatbotscited by 183
  12. 2024COLD-Attack: Jailbreaking LLMs with Stealthiness and Controllabilitycited by 175
2 more
  1. 2023Evil Geniuses: Delving into the Safety of LLM-based Agentscited by 106
  2. 2023Make Them Spill the Beans! Coercive Knowledge Extraction from (Production) LLMscited by 27

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 2; 2026: 4.

6 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025NeuroStrike: Neuron-Level Attacks on Aligned LLMs
  2. 2024NLSR: Neuron-Level Safety Realignment of Large Language Models Against Harmful Fine-Tuning
  3. 2026NeuronGuard: Robust LLM Safety Alignment via Ablation-Aware Safety Signal Redistribution
  4. 2025NeuronTune: Fine-Grained Neuron Modulation for Balanced Safety-Utility Alignment in LLMs
  5. 2026NeST: Neuron Selective Tuning for LLM Safety
  6. 2024Towards Understanding Safety Alignment: A Mechanistic Perspective from Safety Neurons
  7. 2026A Single Neuron Is Sufficient to Bypass Safety Alignment in Large Language Models
  8. 2025Safety Alignment via Constrained Knowledge Unlearning