Unveiling Trust in Multimodal Large Language Models: Evaluation, Analysis, and Mitigation
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
Abstract (arXiv)
The trustworthiness of Multimodal Large Language Models (MLLMs) remains an intense concern despite the significant progress in their capabilities. Existing evaluation and mitigation approaches often focus on narrow aspects and overlook risks introduced by the multimodality. To tackle these challenges, we propose MultiTrust-X, a comprehensive benchmark for evaluating, analyzing, and mitigating the trustworthiness issues of MLLMs. We define a three-dimensional framework, encompassing five trustworthiness aspects which include truthfulness, robustness, safety, fairness, and privacy; two novel risk types covering multimodal risks and cross-modal impacts; and various mitigation strategies from the perspectives of data, model architecture, training, and inference algorithms. Based on the taxonomy, MultiTrust-X includes 32 tasks and 28 curated datasets, enabling holistic evaluations over 30 open-source and proprietary MLLMs and in-depth analysis with 8 representative mitigation methods. Our extensive experiments reveal significant vulnerabilities in current models, including a gap between trustworthiness and general capabilities, as well as the amplification of potential risks in base LLMs by both multimodal training and inference. Moreover, our controlled analysis uncovers key limitations in existing mitigation strategies that, while some methods yield improvements in specific aspects, few effectively address overall trustworthiness, and many introduce unexpected trade-offs that compromise model utility. These findings also provide practical insights for future improvements, such as the benefits of reasoning to better balance safety and performance. Based on these insights, we introduce a Reasoning-Enhanced Safety Alignment (RESA) approach that equips the model with chain-of-thought reasoning ability to discover the underlying risks, achieving state-of-the-art results.
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 84 of its 101 references that are in the map. First posted on arXiv 21 Aug 2025.
Builds on
84 of 101 references.
Closest ancestors · 14
Same direction, newest first
- 2024ETA: Evaluating Then Aligning Safety of Vision Language Models at Inference Time9 Oct
- 2024Sim-CLIP: Unsupervised Siamese Adversarial Fine-Tuning for Robust and Semantically-Rich Vision-Language Models20 Jul
- 2024SPA-VL: A Comprehensive Safety Preference Alignment Dataset for Vision Language Model17 Jun
- 2024MultiTrust: A Comprehensive Benchmark Towards Trustworthy Multimodal Large Language Models11 Jun
- 2024JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks3 Apr
- 2024Eyes Closed, Safety On: Protecting Multimodal LLMs via Image-to-Text Transformation14 Mar
- 2024Robust CLIP: Unsupervised Adversarial Fine-Tuning of Vision Embeddings for Robust Large Vision-Language Models19 Feb
- 2024Safety of Multimodal Large Language Models on Images and Texts1 Feb
- 2024Red Teaming Visual Language Models23 Jan
- 2023FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts9 Nov
- 2023Can Language Models be Instructed to Protect Personal Information?3 Oct
- 2023How Robust is Google's Bard to Adversarial Image Attacks?21 Sep
2 more
Other references · 70
- 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
- 2023GPT-4 Technical Reportcited by 18,396
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2023Visual Instruction Tuningcited by 7,869
- 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,330
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2023Mistral 7Bcited by 3,164
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
38 more
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
- 2023InstructBLIP: Towards General-purpose Vision-Language Models with Instruction Tuningcited by 2,876
- 2023MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Modelscited by 2,711
- 2023InternVL: Scaling up Vision Foundation Models and Aligning for Generic Visual-Linguistic Taskscited by 2,565
- 2016Making the V in VQA Matter: Elevating the Role of Image Understanding in Visual Question Answeringcited by 2,516
- 2023MMBench: Is Your Multi-modal Model an All-around Player?cited by 2,141
- 2023MMMU: A Massive Multi-discipline Multimodal Understanding and Reasoning Benchmark for Expert AGIcited by 2,080
- 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,917
- 2023Evaluating Object Hallucination in Large Vision-Language Modelscited by 1,729
- 2023MME: A Comprehensive Evaluation Benchmark for Multimodal Large Language Modelscited by 1,652
- 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,517
- 2015Microsoft COCO Captions: Data Collection and Evaluation Servercited by 1,462
- 2023PaLM 2 Technical Reportcited by 1,162
- 2023ShareGPT4V: Improving Large Multi-Modal Models with Better Captionscited by 1,005
- 2023SEED-Bench: Benchmarking Multimodal LLMs with Generative Comprehensioncited by 940
- 2020StereoSet: Measuring stereotypical bias in pretrained language modelscited by 924
- 2024Are We on the Right Way for Evaluating Large Vision-Language Models?cited by 914
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
- 2018VizWiz Grand Challenge: Answering Visual Questions from Blind Peoplecited by 858
- 2024Cambrian-1: A Fully Open, Vision-Centric Exploration of Multimodal LLMscited by 838
- 2023CogVLM: Visual Expert for Pretrained Language Modelscited by 708
- 2023Mitigating Object Hallucinations in Large Vision-Language Models through Visual Contrastive Decodingcited by 688
- 2023Safe RLHF: Safe Reinforcement Learning from Human Feedbackcited by 656
- 2023mPLUG-Owl2: Revolutionizing Multi-modal Large Language Model with Modality Collaborationcited by 547
- 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 518
- 2022Diffusion Models for Adversarial Purificationcited by 476
- 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deepcited by 472
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 434
- 2023RLHF-V: Towards Trustworthy MLLMs via Behavior Alignment from Fine-grained Correctional Human Feedbackcited by 412
- 2023Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignmentcited by 401
- 2024InternLM-XComposer2: Mastering Free-form Text-Image Composition and Comprehension in Vision-Language Large Modelcited by 326
- 2023Are aligned neural networks adversarially aligned?cited by 315
- 2024Deliberative Alignment: Reasoning Enables Safer Language Modelscited by 308
- 2024TrustLLM: Trustworthiness in Large Language Modelscited by 285
- 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 232
- 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 230
- 2023Do-Not-Answer: A Dataset for Evaluating Safeguards in LLMscited by 184
- 2024Safety Fine-Tuning at (Almost) No Cost: A Baseline for Vision Large Language Modelscited by 167
50 most cited of 70 All 70 (JSON)
Built on by
Citing papers per year: 2025: 3; 2026: 1.
4 papers.
- 2025DeceptionBench: A Comprehensive Benchmark for AI Deception Behaviors in Real-world Scenarioscited by 19
- 2025Towards Safe Reasoning in Large Reasoning Models via Corrective Interventioncited by 11
- 2025LLaVAShield: Safeguarding Multimodal Multi-Turn Dialogues in Vision-Language Modelscited by 1
- 2026Beyond Correctness: Benchmarking and Aligning Response Behaviors in Hybrid-Thinking MLLMscited by 0
- 2026Beyond Correctness: Benchmarking and Aligning Response Behaviors in Hybrid-Thinking MLLMs13 Aug 2026
- 2025DeceptionBench: A Comprehensive Benchmark for AI Deception Behaviors in Real-world Scenarios17 Oct 2025
- 2025LLaVAShield: Safeguarding Multimodal Multi-Turn Dialogues in Vision-Language Models30 Sep 2025
- 2025Towards Safe Reasoning in Large Reasoning Models via Corrective Intervention29 Sep 2025
Similar, not cited
Close in wording, no citation either way
- 2025SciTrust 2.0: A Comprehensive Framework for Evaluating Trustworthiness of Large Language Models in Scientific Applications
- 2025Mapping Trustworthiness in Large Language Models: A Bibliometric Analysis Bridging Theory to Practice
- 2024MLLMGuard: A Multi-dimensional Safety Evaluation Suite for Multimodal Large Language Models
- 2026Benchmarking Trustworthiness of SLMs: Pre-trained vs. Compressed
- 2023On the Trustworthiness Landscape of State-of-the-art Generative Models: A Survey and Outlook
- 2024Towards Tracing Trustworthiness Dynamics: Revisiting Pre-training Period of Large Language Models
- 2025USB: A Comprehensive and Unified Safety Evaluation Benchmark for Multimodal Large Language Models
- 2025A Survey on Privacy Risks and Protection in Large Language Models