LoRAShield: Data-Free Editing Alignment for Secure Personalized LoRA Sharing
On the map: LLM safety and security → Vision-language and text-to-image safety
Abstract (arXiv)
The proliferation of Low-Rank Adaptation (LoRA) models has democratized personalized text-to-image generation, enabling users to share lightweight models (e.g., personal portraits) on platforms like Civitai and Liblib. However, this "share-and-play" ecosystem introduces critical risks: benign LoRAs can be weaponized by adversaries to generate harmful content (e.g., political, defamatory imagery), undermining creator rights and platform safety. Existing defenses like concept-erasure methods focus on full diffusion models (DMs), neglecting LoRA's unique role as a modular adapter and its vulnerability to adversarial prompt engineering. To bridge this gap, we propose LoRAShield, the first data-free editing framework for securing LoRA models against misuse. Our platform-driven approach dynamically edits and realigns LoRA's weight subspace via adversarial optimization and semantic augmentation. Experimental results demonstrate that LoRAShield achieves remarkable effectiveness, efficiency, and robustness in blocking malicious generations without sacrificing the functionality of the benign task. By shifting the defense to platforms, LoRAShield enables secure, scalable sharing of personalized models, a critical step toward trustworthy generative ecosystems.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Vision-language and text-to-image safety, one of 12 directions in LLM safety and security. Builds on 25 of its 56 references that are in the map. First posted on arXiv 5 Jul 2025.
Builds on
25 of 56 references.
Closest ancestors · 8
Same direction, newest first
- 2024Buster: Implanting Semantic Backdoor into Text Encoder to Mitigate NSFW Content Generation10 Dec
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May
- 2024SafeGen: Mitigating Sexually Explicit Content Generation in Text-to-Image Models10 Apr
- 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Models19 Feb
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
- 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Prompts12 Sep
- 2023SneakyPrompt: Jailbreaking Text-to-image Generative Models20 May
Other references · 17
- 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,255
- 2024Qwen2.5 Technical Reportcited by 4,942
- 2019Machine Unlearningcited by 1,061
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 513
- 2023Unified Concept Editing in Diffusion Modelscited by 388
- 2024PiSSA: Principal Singular Values and Singular Vectors Adaptation of Large Language Modelscited by 269
- 2023Stable Bias: Analyzing Societal Representations in Diffusion Modelscited by 226
- 2023Understanding and Mitigating Copying in Diffusion Modelscited by 209
- 2023MMA-Diffusion: MultiModal Attack on Diffusion Modelscited by 194
- 2023Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Modelscited by 175
- 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applicationscited by 169
- 2014Guaranteed Matrix Completion via Non-convex Factorizationcited by 82
5 more
- 2023Exploiting the Signal-Leak Bias in Diffusion Modelscited by 36
- 2023Security and Privacy on Generative Data in AIGC: A Surveycited by 34
- 2024Exploring the Use of Abusive Generative AI Models on Civitaicited by 10
- 2024AEIOU: A Unified Defense Framework against NSFW Prompts in Text-to-Image Modelscited by 7
- 2024Enhancing Adversarial Transferability with Adversarial Weight Tuningcited by 5
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2026When LoRA Betrays: Backdooring Text-to-Image Models by Masquerading as Benign Adapters
- 2026LoRango: It Takes Two LoRAs to Unlock Hidden Behaviors in Diffusion Models
- 2026LoRA-Key: User-Centric LoRA Watermarking for Text-to-Image Diffusion Models
- 2026Customization under Fire: Plugin Poisoning in Text-to-Image Ecosystem
- 2023EditShield: Protecting Unauthorized Image Editing by Instruction-guided Diffusion Models
- 2025GuardDoor: Safeguarding Against Malicious Diffusion Editing via Protective Backdoors
- 2024Risks When Sharing LoRA Fine-Tuned Diffusion Model Weights
- 2025Causal-Guided Detoxify Backdoor Attack of Open-Weight LoRA Models