MSR-Align: Policy-Grounded Multimodal Alignment for Safety-Aware Reasoning in Vision-Language Models
On the map: LLM reasoning → Reasoning for agents, planning and code
also in 2 more
Abstract (arXiv)
Vision-Language Models (VLMs) have achieved remarkable progress in multimodal reasoning tasks through enhanced chain-of-thought capabilities. However, this advancement also introduces novel safety risks, as these models become increasingly vulnerable to harmful multimodal prompts that can trigger unethical or unsafe behaviors. Existing safety alignment approaches, primarily designed for unimodal language models, fall short in addressing the complex and nuanced threats posed by multimodal inputs. Moreover, current safety datasets lack the fine-grained, policy-grounded reasoning required to robustly align reasoning-capable VLMs. In this work, we introduce {MSR-Align}, a high-quality Multimodal Safety Reasoning dataset tailored to bridge this gap. MSR-Align supports fine-grained, deliberative reasoning over standardized safety policies across both vision and text modalities. Our data generation pipeline emphasizes multimodal diversity, policy-grounded reasoning, and rigorous quality filtering using strong multimodal judges. Extensive experiments demonstrate that fine-tuning VLMs on MSR-Align substantially improves robustness against both textual and vision-language jailbreak attacks, while preserving or enhancing general reasoning performance. MSR-Align provides a scalable and effective foundation for advancing the safety alignment of reasoning-capable VLMs. Our dataset is made publicly available at https://huggingface.co/datasets/Leigest/MSR-Align.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 21 of its 42 references that are in the map. First posted on arXiv 24 Jun 2025.
Builds on
21 of 42 references.
Closest ancestors · 1
Same direction, newest first
Other references · 20
- 2023Visual Instruction Tuningcited by 7,869
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2023MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Modelscited by 2,711
- 2023LIMA: Less Is More for Alignmentcited by 1,100
- 2022Red Teaming Language Models with Language Modelscited by 1,026
- 2023Monkey: Image Resolution and Text Label Are Important Things for Large Multi-modal Modelscited by 357
- 2025MME-CoT: Benchmarking Chain-of-Thought in Large Multimodal Models for Reasoning Quality, Robustness, and Efficiencycited by 125
- 2025SPEED: Scalable, Precise, and Efficient Concept Erasure for Diffusion Modelscited by 36
- 2025HiddenDetect: Detecting Jailbreak Attacks against Large Vision-Language Models via Monitoring Hidden Statescited by 33
- 2025MME-Reasoning: A Comprehensive Benchmark for Logical Reasoning in MLLMscited by 33
- 2024Separable Multi-Concept Erasure from Diffusion Modelscited by 28
- 2025Equilibrate RLHF: Towards Balancing Helpfulness-Safety Trade-off in Large Language Modelscited by 22
8 more
- 2024RapGuard: Safeguarding Multimodal Large Language Models via Rationale-aware Defensive Promptingcited by 19
- 2023DPM-TSE: A Diffusion Probabilistic Model for Target Sound Extractioncited by 12
- 2025Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 2025cited by 12
- 2023Dual Conic Proxies for AC Optimal Power Flowcited by 11
- 2025Fundamental Limits of Hierarchical Secure Aggregation with Cyclic User Associationcited by 7
- 2025Self-Adaptive Gamma Context-Aware SSM-based Model for Metal Defect Detectioncited by 2
- 2023A Critique of Human-Autonomous Team Dynamics: Contrasting Qualitative and Quantitative Perspectivescited by 1
- 2024Nonlinear and degenerate discounted approximation in discrete weak KAM theorycited by 1
Built on by
Citing papers per year: 2025: 3; 2026: 4.
7 papers.
- 2025QuadSentinel: Sequent Safety for Machine-Checkable Control in Multi-agent Systemscited by 4
- 2026BLM-Guard: Explainable Multimodal Ad Moderation with Chain-of-Thought and Policy-Aligned Rewardscited by 3
- 2025From Perception to Reasoning: Deep Thinking Empowers Multimodal Large Language Modelscited by 1
- 2025Think-Reflect-Revise: A Policy-Guided Reflective Framework for Safety Alignment in Large Vision Language Modelscited by 1
- 2026PolicyShiftGuard: Benchmarking and Improving Policy-Adaptive Image Guardrailscited by 0
- 2026V-DEAL: Diagnosing Video Safety De-Calibration as an Understanding-Refusal Coupling Failurecited by 0
- 2026Taming CoT Obfuscation in VLMs: From Mechanistic Evidence to Activation Enforcementcited by 0
- 2026Taming CoT Obfuscation in VLMs: From Mechanistic Evidence to Activation Enforcement21 Sep 2026
- 2026V-DEAL: Diagnosing Video Safety De-Calibration as an Understanding-Refusal Coupling Failure23 Jul 2026
- 2026PolicyShiftGuard: Benchmarking and Improving Policy-Adaptive Image Guardrails7 Jul 2026
- 2026BLM-Guard: Explainable Multimodal Ad Moderation with Chain-of-Thought and Policy-Aligned Rewards20 Feb 2026
- 2025QuadSentinel: Sequent Safety for Machine-Checkable Control in Multi-agent Systems18 Dec 2025
- 2025Think-Reflect-Revise: A Policy-Guided Reflective Framework for Safety Alignment in Large Vision Language Models8 Dec 2025
- 2025From Perception to Reasoning: Deep Thinking Empowers Multimodal Large Language Models17 Nov 2025
Similar, not cited
Close in wording, no citation either way
- 2025PRISM: Robust VLM Alignment with Principled Reasoning for Integrated Safety in Multimodality
- 2025VisuoAlign: Safety Alignment of LVLMs with Multimodal Tree Search
- 2025SafeGRPO: Self-Rewarded Multimodal Safety Alignment via Rule-Governed Policy Optimization
- 2025VLMGuard-R1: Proactive Safety Alignment for VLMs via Reasoning-Driven Prompt Optimization
- 2024SPA-VL: A Comprehensive Safety Preference Alignment Dataset for Vision Language Model
- 2024ETA: Evaluating Then Aligning Safety of Vision Language Models at Inference Time
- 2024Unraveling and Mitigating Safety Alignment Degradation of Vision-Language Models
- 2025VLSU: Mapping the Limits of Joint Multimodal Understanding for AI Safety