Exploring the Impact of Instruction-Tuning on LLM's Susceptibility to Misinformation
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
Instruction-tuning enhances the ability of large language models (LLMs) to follow user instructions more accurately, improving usability while reducing harmful outputs. However, this process may increase the model's dependence on user input, potentially leading to the unfiltered acceptance of misinformation and the generation of hallucinations. Existing studies primarily highlight that LLMs are receptive to external information that contradict their parametric knowledge, but little research has been conducted on the direct impact of instruction-tuning on this phenomenon. In our study, we investigate the impact of instruction-tuning on LLM's susceptibility to misinformation. Our analysis reveals that instruction-tuned LLMs are significantly more likely to accept misinformation when it is presented by the user. A comparison with base models shows that instruction-tuning increases reliance on user-provided information, shifting susceptibility from the assistant role to the user role. Furthermore, we explore additional factors influencing misinformation susceptibility, such as the role of the user in prompt structure, misinformation length, and the presence of warnings in the system prompt. Our findings underscore the need for systematic approaches to mitigate unintended consequences of instruction-tuning and enhance the reliability of LLMs in real-world applications.
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 20 of its 29 references that are in the map. First posted on arXiv 24 Jul 2025.
Builds on
20 of 29 references.
References · 20
- 2023GPT-4 Technical Reportcited by 18,396
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,724
- 2019BoolQ: Exploring the Surprising Difficulty of Natural Yes/No Questionscited by 2,183
- 2023LIMA: Less Is More for Alignmentcited by 1,100
- 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 836
- 2020How Much Knowledge Can You Pack Into the Parameters of a Language Model?cited by 719
- 2023Adaptive Chameleon or Stubborn Sloth: Revealing the Behavior of Large Language Models in Knowledge Conflictscited by 341
- 2023The Earth is Flat because...: Investigating LLMs' Belief towards Misinformation via Persuasive Conversationcited by 109
- 2024Tug-of-War Between Knowledge: Exploring and Resolving Knowledge Conflicts in Retrieval-Augmented Language Modelscited by 93
8 more
- 2023Evaluating the Instruction-Following Robustness of Large Language Models to Prompt Injectioncited by 59
- 2023From Language Modeling to Instruction Following: Understanding the Behavior Shift in LLMs after Instruction Tuningcited by 56
- 2023Why So Gullible? Enhancing the Robustness of Retrieval-Augmented Models against Counterfactual Noisecited by 54
- 2021Attacking Open-domain Question Answering by Injecting Misinformationcited by 41
- 2023Merging Generated and Retrieved Knowledge for Open-Domain QAcited by 36
- 2023Intuitive or Dependent? Investigating LLMs' Behavior Style to Conflicting Promptscited by 23
- 2024Preemptive Answer "Attacks" on Chain-of-Thought Reasoningcited by 19
- 2022Defending Against Disinformation Attacks in Open-Domain Question Answeringcited by 12
Built on by
Citing papers per year: 2026: 4.
4 papers.
- 2026The Facade of Truth: Uncovering and Mitigating LLM Susceptibility to Deceptive Evidencecited by 3
- 2026MisSpans: Fine-Grained False Span Identification in Cross-Domain Fake Newscited by 0
- 2026How Large Language Models Balance Internal Knowledge with User and Document Assertionscited by 0
- 2026Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerabilitycited by 0
- 2026Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability11 Jul 2026
- 2026How Large Language Models Balance Internal Knowledge with User and Document Assertions24 Apr 2026
- 2026The Facade of Truth: Uncovering and Mitigating LLM Susceptibility to Deceptive Evidence9 Jan 2026
- 2026MisSpans: Fine-Grained False Span Identification in Cross-Domain Fake News8 Jan 2026
Similar, not cited
Close in wording, no citation either way
- 2025How does Misinformation Affect Large Language Model Behaviors and Preferences?
- 2023Instructed to Bias: Instruction-Tuned Language Models Exhibit Emergent Cognitive Bias
- 2026On the Limits of LLM Adaptability: Impact of Model-Internalized Priors on Annotation Task Performance
- 2025Unraveling Misinformation Propagation in LLM Reasoning
- 2023Psychometric Predictive Power of Large Language Models
- 2025Instruction Tuning with and without Context: Behavioral Shifts and Downstream Impact
- 2025Beyond Prompt-Induced Lies: Investigating LLM Deception on Benign Prompts
- 2026Failing to Falsify: Evaluating and Mitigating Confirmation Bias in Language Models