mlsanityData to 14 Oct 2026

Accidental Vulnerability: Factors in Fine-Tuning that Shift Model Safeguards

arXiv 2505.16789 ↗First posted 22 May 2025cs.CL cs.AI cs.LGcited by 5

Not on the map. Why?

Abstract (arXiv)

As large language models (LLMs) gain popularity, their vulnerability to adversarial attacks emerges as a primary concern. While fine-tuning models on domain-specific datasets is often employed to improve model performance, it can inadvertently introduce vulnerabilities within the underlying model. In this work, we investigate Accidental Vulnerability, unexpected vulnerabilities arising from characteristics of fine-tuning data. We begin by identifying potential correlation factors such as linguistic features, semantic similarity, and toxicity across multiple experimental datasets. We then evaluate the adversarial robustness of these fine-tuned models, analyzing persona shifts and interpretability traits to understand how dataset factors contribute to attack success rates. Lastly, we explore causal relationships that offer new insights into adversarial defense strategies, highlighting the crucial role of dataset design in preserving model alignment. Our code is available at https://github.com/psyonp/accidental_vulnerability.

Key facts. Cited by 5 papers in the map (data through 14 Oct 2026). Builds on 40 of its 58 references that are in the map. First posted on arXiv 22 May 2025.

Builds on

40 of 58 references.

References · 40

  1. 2020Language Models are Few-Shot Learnerscited by 32,419
  2. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
  3. 2021Training Verifiers to Solve Math Word Problemscited by 10,109
  4. 2020Measuring Massive Multitask Language Understandingcited by 7,963
  5. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  6. 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,886
  7. 2016Overcoming catastrophic forgetting in neural networkscited by 4,787
  8. 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,100
  9. 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
  10. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
  11. 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
  12. 2019Similarity of Neural Network Representations Revisitedcited by 1,755
28 more
  1. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
  2. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
  3. 2016On Large-Batch Training for Deep Learning: Generalization Gap and Sharp Minimacited by 1,352
  4. 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,154
  5. 2021Ethical and social risks of harm from Language Modelscited by 966
  6. 2023Large Language Modelscited by 780
  7. 2022Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons Learnedcited by 729
  8. 2019Universal Adversarial Triggers for Attacking and Analyzing NLPcited by 722
  9. 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
  10. 2018Gender Bias in Coreference Resolutioncited by 442
  11. 2022ToxiGen: A Large-Scale Machine-Generated Dataset for Adversarial and Implicit Hate Speech Detectioncited by 422
  12. 2023Hard Prompts Made Easy: Gradient-Based Discrete Optimization for Prompt Tuning and Discoverycited by 336
  13. 2024Improving Alignment and Robustness with Circuit Breakerscited by 322
  14. 2024JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attackscited by 230
  15. 2024Jailbreak Attacks and Defenses Against Large Language Models: A Surveycited by 230
  16. 2024Two Tales of Persona in LLMs: A Survey of Role-Playing and Personalizationcited by 208
  17. 2024Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMscited by 173
  18. 2023Fundamental Limitations of Alignment in Large Language Modelscited by 155
  19. 2024What is in Your Safe Data? Identifying Benign Data that Breaks Safetycited by 118
  20. 2024LoRA vs Full Fine-tuning: An Illusion of Equivalencecited by 109
  21. 2024Harmful Fine-tuning Attacks and Defenses for Large Language Models: A Surveycited by 90
  22. 2023EQ-Bench: An Emotional Intelligence Benchmark for Large Language Modelscited by 80
  23. 2024Current state of LLM Risks and AI Guardrailscited by 46
  24. 2024Operationalizing a Threat Model for Red-Teaming Large Language Models (LLMs)cited by 46
  25. 2024Securing Large Language Models: Threats, Vulnerabilities and Responsible Practicescited by 37
  26. 2024Effects of diversity incentives on sample diversity and downstream model performance in LLM-based text augmentationcited by 17
  27. 2024Fine-Tuning, Quantization, and LLMs: Navigating Unintended Outcomescited by 14
  28. 2023Methods for Quantifying Dataset Similarity: a Review, Taxonomy and Comparisoncited by 11

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 2; 2026: 3.

5 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026The Heterogeneous Safety Impacts of Benign Multilingual Fine-Tuning
  2. 2024What Makes and Breaks Safety Fine-tuning? A Mechanistic Study
  3. 2024Unleashing the Unseen: Harnessing Benign Datasets for Jailbreaking Large Language Models
  4. 2025AdversariaLLM: A Unified and Modular Toolbox for LLM Robustness Research
  5. 2025Scaling Patterns in Adversarial Alignment: Evidence from Multi-LLM Jailbreak Experiments
  6. 2025Fine-Tuning Lowers Safety and Disrupts Evaluation Consistency
  7. 2023Survey of Vulnerabilities in Large Language Models Revealed by Adversarial Attacks
  8. 2026Open-Weight LLM Fine-Tuning Defenses are Susceptible to Simple Attacks