Bridging the Gap in Vision Language Models in Identifying Unsafe Concepts Across Modalities
On the map: LLM reasoning → Reasoning for agents, planning and code
also in 2 more
Abstract (arXiv)
Vision-language models (VLMs) are increasingly applied to identify unsafe or inappropriate images due to their internal ethical standards and powerful reasoning abilities. However, it is still unclear whether they can recognize various unsafe concepts when presented in different modalities, such as text and images. To address this, we first compile the UnsafeConcepts dataset, featuring 75 unsafe concepts, i.e., ``Swastika,'' ``Sexual Harassment,'' and ``Assaults,'' along with associated 1.5K images. We then conduct a systematic evaluation of VLMs' perception (concept recognition) and alignment (ethical reasoning) capabilities. We assess eight popular VLMs and find that, although most VLMs accurately perceive unsafe concepts, they sometimes mistakenly classify these concepts as safe. We also identify a consistent modality gap among open-source VLMs in distinguishing between visual and textual unsafe concepts. To bridge this gap, we introduce a simplified reinforcement learning (RL)-based approach using proximal policy optimization (PPO) to strengthen the ability to identify unsafe concepts from images. Our approach uses reward scores based directly on VLM responses, bypassing the need for collecting human-annotated preference data to train a new reward model. Experimental results show that our approach effectively enhances VLM alignment on images while preserving general capabilities. It outperforms baselines such as supervised fine-tuning (SFT) and direct preference optimization (DPO). We hope our dataset, evaluation findings, and proposed alignment solution contribute to the community's efforts in advancing safe VLMs.
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 47 of its 59 references that are in the map. First posted on arXiv 15 Jul 2025.
Builds on
47 of 59 references.
Closest ancestors · 2
Same direction, newest first
- 2024Eyes Closed, Safety On: Protecting Multimodal LLMs via Image-to-Text Transformation14 Mar
- 2024Image Safeguarding: Reasoning with Conditional Vision Language Model and Obfuscating Unsafe Content Counterfactually19 Jan
Other references · 45
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
- 2023GPT-4 Technical Reportcited by 18,132
- 2014Microsoft COCO: Common Objects in Contextcited by 17,498
- 2017Proximal Policy Optimization Algorithmscited by 14,441
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2023Visual Instruction Tuningcited by 7,792
- 2023Improved Baselines with Visual Instruction Tuningcited by 4,362
- 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,310
- 2024Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolutioncited by 4,151
- 2017Deep reinforcement learning from human preferencescited by 3,846
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,634
33 more
- 2023InstructBLIP: Towards General-purpose Vision-Language Models with Instruction Tuningcited by 2,855
- 2024Qwen2 Technical Reportcited by 2,076
- 2023MME: A Comprehensive Evaluation Benchmark for Multimodal Large Language Modelscited by 1,624
- 2017Curiosity-driven Exploration by Self-supervised Predictioncited by 1,173
- 2023ShareGPT4V: Improving Large Multi-Modal Models with Better Captionscited by 1,000
- 2023CogVLM: Visual Expert for Pretrained Language Modelscited by 704
- 2023Aligning Large Multimodal Models with Factually Augmented RLHFcited by 703
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 501
- 2023RLHF-V: Towards Trustworthy MLLMs via Behavior Alignment from Fine-grained Correctional Human Feedbackcited by 404
- 2024InternLM2 Technical Reportcited by 391
- 2024InternLM-XComposer2: Mastering Free-form Text-Image Composition and Comprehension in Vision-Language Large Modelcited by 326
- 2016Designing Neural Network Architectures using Reinforcement Learningcited by 277
- 2023MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Modelscited by 255
- 2023Secrets of RLHF in Large Language Models Part I: PPOcited by 226
- 2023Helping or Herding? Reward Model Ensembles Mitigate but do not Eliminate Reward Hackingcited by 195
- 2023Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Modelscited by 171
- 2024RL-VLM-F: Reinforcement Learning from Vision Language Foundation Model Feedbackcited by 147
- 2023Silkie: Preference Distillation for Large Visual Language Modelscited by 128
- 2024Curiosity-driven Red-teaming for Large Language Modelscited by 83
- 2024SPA-VL: A Comprehensive Safety Preference Alignment Dataset for Vision Language Modelcited by 82
- 2024Red Teaming Visual Language Modelscited by 62
- 2024ETA: Evaluating Then Aligning Safety of Vision Language Models at Inference Timecited by 57
- 2024UnsafeBench: Benchmarking Image Safety Classifiers on Real-World and AI-Generated Imagescited by 52
- 2024GOAT-Bench: Safety Insights to Large Multimodal Models through Meme-Based Social Abusecited by 50
- 2024The Perfect Blend: Redefining RLHF with Mixture of Judgescited by 43
- 2024Assessment of Multimodal Large Language Models in Alignment with Human Valuescited by 36
- 2025Automated Generation of Challenging Multiple-Choice Questions for Vision Language Model Evaluationcited by 28
- 2024Safety Alignment for Vision Language Modelscited by 27
- 2022On the Evolution of (Hateful) Memes by Means of Multimodal Contrastive Learningcited by 26
- 2024Unraveling and Mitigating Safety Alignment Degradation of Vision-Language Modelscited by 23
- 2024Bridge the Modality and Capability Gaps in Vision-Language Model Selectioncited by 20
- 2024Moderating Illicit Online Image Promotion for Unsafe User-Generated Content Games Using Large Vision-Language Modelscited by 13
- 2025HateBench: Benchmarking Hate Speech Detectors on LLM-Generated Content and Hate Campaignscited by 10
Built on by
Citing papers per year: 2025: 1; 2026: 3.
4 papers.
- 2025Hate in Plain Sight: On the Risks of Moderating AI-Generated Hateful Illusionscited by 6
- 2026On the Adversarial Robustness of Multimodal LLM Judgescited by 3
- 2026VISTA: Auditing Semantic Divergence in Vision-Language Modelscited by 0
- 2026One Modality to Forget Them All: Enhancing Cross-Modal Unlearning in Vision-Language Modelscited by 0
- 2026One Modality to Forget Them All: Enhancing Cross-Modal Unlearning in Vision-Language Models17 Jul 2026
- 2026VISTA: Auditing Semantic Divergence in Vision-Language Models3 Jul 2026
- 2026On the Adversarial Robustness of Multimodal LLM Judges14 Jun 2026
- 2025Hate in Plain Sight: On the Risks of Moderating AI-Generated Hateful Illusions30 Jul 2025
Similar, not cited
Close in wording, no citation either way
- 2025VLSU: Mapping the Limits of Joint Multimodal Understanding for AI Safety
- 2025MSTS: A Multimodal Safety Test Suite for Vision-Language Models
- 2025Security Tensors as a Cross-Modal Bridge: Extending Text-Aligned Safety to Vision in LVLM
- 2025HoliSafe: Holistic Safety Benchmarking and Modeling for Vision-Language Model
- 2026Lingua-SafetyBench: A Benchmark for Safety Evaluation of Multilingual Vision-Language Models
- 2025VLM-Guard: Safeguarding Vision-Language Models via Fulfilling Safety Alignment Gap
- 2026Jailbreaking Vision-Language Models Through the Visual Modality
- 2026EviSafe: Evidence-Grounded Safety Evaluation for Vision-Language Models