Reasoning Model Unlearning: Forgetting Traces, Not Just Answers, While Preserving Reasoning Skills
On the map: LLM reasoning → Reasoning for agents, planning and code
also in 1 more
Abstract (arXiv)
Recent advances in large reasoning models (LRMs) have enabled strong chain-of-thought (CoT) generation through test-time computation. While these multi-step reasoning capabilities represent a major milestone in language model performance, they also introduce new safety risks. In this work, we present the first systematic study to revisit the problem of machine unlearning in the context of LRMs. Machine unlearning refers to the process of removing the influence of sensitive, harmful, or undesired data or knowledge from a trained model without full retraining. We show that conventional unlearning algorithms, originally designed for non-reasoning models, are inadequate for LRMs. In particular, even when final answers are successfully erased, sensitive information often persists within the intermediate reasoning steps, i.e., CoT trajectories. To address this challenge, we extend conventional unlearning and propose Reasoning-aware Representation Misdirection for Unlearning (R2MU), a novel method that effectively suppresses sensitive reasoning traces and prevents the generation of associated final answers, while preserving the model's reasoning ability. Our experiments demonstrate that R2MU significantly reduces sensitive information leakage within reasoning traces and achieves strong performance across both safety and reasoning benchmarks, evaluated on state-of-the-art models such as DeepSeek-R1-Distill-LLaMA-8B and DeepSeek-R1-Distill-Qwen-14B.
Key facts. Cited by 14 papers in the map (data through 14 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 41 of its 48 references that are in the map. First posted on arXiv 15 Jun 2025.
Builds on
41 of 48 references.
Closest ancestors · 9
Same direction, newest first
- 2025Safety in Large Reasoning Models: A Survey24 Apr
- 2025SaRO: Enhancing LLM Safety through Reasoning-based Alignment13 Apr
- 2025STAR-1: Safer Alignment of Reasoning LLMs with 1K Data2 Apr
- 2025Safety Tax: Safety Alignment Makes Your Large Reasoning Models Less Reasonable1 Mar
- 2025Reasoning-to-Defend: Safety-Aware Reasoning Can Defend Large Language Models from Jailbreaking18 Feb
- 2025The Hidden Risks of Large Reasoning Models: A Safety Assessment of R118 Feb
- 2025SafeChain: Safety of Language Models with Long Chain-of-Thought Reasoning Capabilities17 Feb
- 2024OpenAI o1 System Card21 Dec
- 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearning9 Oct
Other references · 32
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,330
- 2024Qwen2.5 Technical Reportcited by 4,942
- 2016Pointer Sentinel Mixture Modelscited by 3,096
- 2024Qwen2 Technical Reportcited by 2,120
- 2025s1: Simple test-time scalingcited by 1,341
- 2025Kimi k1.5: Scaling Reinforcement Learning with LLMscited by 1,210
- 2022Editing Models with Task Arithmeticcited by 1,120
- 2024JailbreakBench: An Open Robustness Benchmark for Jailbreaking Large Language Modelscited by 536
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 509
20 more
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearningcited by 504
- 2025LIMO: Less is More for Reasoningcited by 498
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Modelscited by 437
- 2024A StrongREJECT for Empty Jailbreakscited by 385
- 2023Who's Harry Potter? Approximate Unlearning in LLMscited by 381
- 2025From System 1 to System 2: A Survey of Reasoning Large Language Modelscited by 320
- 2023Large Language Model Unlearningcited by 302
- 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 224
- 2025Reasoning Models Can Be Effective Without Thinkingcited by 187
- 2025Thoughts Are All Over the Place: On the Underthinking of o1-Like LLMscited by 163
- 2025LLM Post-Training: A Deep Dive into Reasoning Large Language Modelscited by 135
- 2024Large Language Model Unlearning via Embedding-Corrupted Promptscited by 116
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearningcited by 104
- 2025LightThinker: Thinking Step-by-Step Compressioncited by 104
- 2024Guardrail Baselines for Unlearning in LLMscited by 96
- 2023DEPN: Detecting and Editing Privacy Neurons in Pretrained Language Modelscited by 79
- 2025Towards LLM Unlearning Resilient to Relearning Attacks: A Sharpness-Aware Minimization Perspective and Beyondcited by 79
- 2025Effectively Controlling Reasoning Models through Thinking Interventioncited by 65
- 2024Alternate Preference Optimization for Unlearning Factual Knowledge in Large Language Modelscited by 33
- 2024RKLD: Reverse KL-Divergence-based Knowledge Distillation for Unlearning Personal Information in Large Language Modelscited by 21
Built on by
Citing papers per year: 2025: 8; 2026: 6.
14 papers.
Sort:
By area:
- 2025A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Modelscited by 25
- 2025Towards Safe Reasoning in Large Reasoning Models via Corrective Interventioncited by 11
- 2025Leak@k: Unlearning Does Not Make LLMs Forget Under Probabilistic Decodingcited by 9
- 2026Auditing Reasoning-Trace Memorization Claims after Unlearning with Head-Conditioned Canariescited by 7
- 2025R1-ACT: Efficient Reasoning Model Safety Alignment by Activating Safety Knowledgecited by 6
- 2025Forgetting to Forget: Attention Sink as A Gateway for Backdooring LLM Unlearningcited by 6
- 2025Towards Reasoning-Preserving Unlearning in Multimodal Large Language Modelscited by 4
- 2026Simulating Novice Students Using Machine Unlearning and Relearning in Large Language Modelscited by 3
- 2025Unlearning as Ablation: Toward a Falsifiable Benchmark for Generative Scientific Discoverycited by 2
- 2025LLM Unlearning Under the Microscope: A Full-Stack View on Methods and Metricscited by 2
- 2026Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilitiescited by 1
- 2026Test-Time Unlearning via Sparse Autoencodercited by 0
2 more
- 2026REDaCT: Collapse-Free Unlearning in Large Reasoning Models8 Oct 2026
- 2026Unlearning Deceptive Behaviors in LLMs with Contrastive Forget Sets30 Sep 2026
- 2026Test-Time Unlearning via Sparse Autoencoder14 Sep 2026
- 2026Auditing Reasoning-Trace Memorization Claims after Unlearning with Head-Conditioned Canaries17 May 2026
- 2026Simulating Novice Students Using Machine Unlearning and Relearning in Large Language Models27 Mar 2026
- 2026Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilities29 Jan 2026
- 2025Towards Reasoning-Preserving Unlearning in Multimodal Large Language Models26 Nov 2025
- 2025Leak@k: Unlearning Does Not Make LLMs Forget Under Probabilistic Decoding7 Nov 2025
- 2025Forgetting to Forget: Attention Sink as A Gateway for Backdooring LLM Unlearning19 Oct 2025
- 2025LLM Unlearning Under the Microscope: A Full-Stack View on Methods and Metrics8 Oct 2025
- 2025Towards Safe Reasoning in Large Reasoning Models via Corrective Intervention29 Sep 2025
- 2025A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Models4 Sep 2025
- 2025Leak@k: Unlearning Does Not Make LLMs Forget Under Probabilistic Decodingcited by 9
- 2025Forgetting to Forget: Attention Sink as A Gateway for Backdooring LLM Unlearningcited by 6
- 2026Simulating Novice Students Using Machine Unlearning and Relearning in Large Language Modelscited by 3
- 2025Unlearning as Ablation: Toward a Falsifiable Benchmark for Generative Scientific Discoverycited by 2
- 2025LLM Unlearning Under the Microscope: A Full-Stack View on Methods and Metricscited by 2
- 2026Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilitiescited by 1
- 2026Test-Time Unlearning via Sparse Autoencodercited by 0
- 2026Unlearning Deceptive Behaviors in LLMs with Contrastive Forget Setscited by 0
- 2026Unlearning Deceptive Behaviors in LLMs with Contrastive Forget Sets30 Sep 2026
- 2026Test-Time Unlearning via Sparse Autoencoder14 Sep 2026
- 2026Simulating Novice Students Using Machine Unlearning and Relearning in Large Language Models27 Mar 2026
- 2026Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilities29 Jan 2026
- 2025Leak@k: Unlearning Does Not Make LLMs Forget Under Probabilistic Decoding7 Nov 2025
- 2025Forgetting to Forget: Attention Sink as A Gateway for Backdooring LLM Unlearning19 Oct 2025
- 2025LLM Unlearning Under the Microscope: A Full-Stack View on Methods and Metrics8 Oct 2025
- 2025Unlearning as Ablation: Toward a Falsifiable Benchmark for Generative Scientific Discovery25 Aug 2025
- 2025A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Modelscited by 25
- 2025Towards Safe Reasoning in Large Reasoning Models via Corrective Interventioncited by 11
- 2026Auditing Reasoning-Trace Memorization Claims after Unlearning with Head-Conditioned Canariescited by 7
- 2025R1-ACT: Efficient Reasoning Model Safety Alignment by Activating Safety Knowledgecited by 6
- 2025Towards Reasoning-Preserving Unlearning in Multimodal Large Language Modelscited by 4
- 2026REDaCT: Collapse-Free Unlearning in Large Reasoning Modelscited by 0
- 2026REDaCT: Collapse-Free Unlearning in Large Reasoning Models8 Oct 2026
- 2026Auditing Reasoning-Trace Memorization Claims after Unlearning with Head-Conditioned Canaries17 May 2026
- 2025Towards Reasoning-Preserving Unlearning in Multimodal Large Language Models26 Nov 2025
- 2025Towards Safe Reasoning in Large Reasoning Models via Corrective Intervention29 Sep 2025
- 2025A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Models4 Sep 2025
- 2025R1-ACT: Efficient Reasoning Model Safety Alignment by Activating Safety Knowledge1 Aug 2025
Similar, not cited
Close in wording, no citation either way
- 2026Selective Forgetting for Large Reasoning Models
- 2026GUARD: Natural Forgetting in Large Reasoning Models via Guided Answer-Reasoning Distillation
- 2025R-TOFU: Unlearning in Large Reasoning Models
- 2026Making LLMs Truly Forget: Deep Unlearning by Searching, Selecting, and Severing Knowledge Paths
- 2026Towards Unveiling Vulnerabilities of Large Reasoning Models in Machine Unlearning
- 2026Explainable LLM Unlearning Through Reasoning
- 2026Leak-Resistant Unlearning: A New Benchmark for Evaluating Multi-Hop Reasoning Consistency and Recovery Robustness
- 2025DRAGON: Guard LLM Unlearning in Context via Negative Detection and Reasoning