mlsanityData to 14 Oct 2026

Unveiling Trust in Multimodal Large Language Models: Evaluation, Analysis, and Mitigation

arXiv 2508.15370 ↗First posted 21 Aug 2025cs.CL cs.AIcited by 4

On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness

Abstract (arXiv)

The trustworthiness of Multimodal Large Language Models (MLLMs) remains an intense concern despite the significant progress in their capabilities. Existing evaluation and mitigation approaches often focus on narrow aspects and overlook risks introduced by the multimodality. To tackle these challenges, we propose MultiTrust-X, a comprehensive benchmark for evaluating, analyzing, and mitigating the trustworthiness issues of MLLMs. We define a three-dimensional framework, encompassing five trustworthiness aspects which include truthfulness, robustness, safety, fairness, and privacy; two novel risk types covering multimodal risks and cross-modal impacts; and various mitigation strategies from the perspectives of data, model architecture, training, and inference algorithms. Based on the taxonomy, MultiTrust-X includes 32 tasks and 28 curated datasets, enabling holistic evaluations over 30 open-source and proprietary MLLMs and in-depth analysis with 8 representative mitigation methods. Our extensive experiments reveal significant vulnerabilities in current models, including a gap between trustworthiness and general capabilities, as well as the amplification of potential risks in base LLMs by both multimodal training and inference. Moreover, our controlled analysis uncovers key limitations in existing mitigation strategies that, while some methods yield improvements in specific aspects, few effectively address overall trustworthiness, and many introduce unexpected trade-offs that compromise model utility. These findings also provide practical insights for future improvements, such as the benefits of reasoning to better balance safety and performance. Based on these insights, we introduce a Reasoning-Enhanced Safety Alignment (RESA) approach that equips the model with chain-of-thought reasoning ability to discover the underlying risks, achieving state-of-the-art results.

Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 84 of its 101 references that are in the map. First posted on arXiv 21 Aug 2025.

Builds on

84 of 101 references.

Closest ancestors · 14

Same direction, newest first

  1. 2024ETA: Evaluating Then Aligning Safety of Vision Language Models at Inference Time9 Oct
  2. 2024Sim-CLIP: Unsupervised Siamese Adversarial Fine-Tuning for Robust and Semantically-Rich Vision-Language Models20 Jul
  3. 2024SPA-VL: A Comprehensive Safety Preference Alignment Dataset for Vision Language Model17 Jun
  4. 2024MultiTrust: A Comprehensive Benchmark Towards Trustworthy Multimodal Large Language Models11 Jun
  5. 2024JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks3 Apr
  6. 2024Eyes Closed, Safety On: Protecting Multimodal LLMs via Image-to-Text Transformation14 Mar
  7. 2024Robust CLIP: Unsupervised Adversarial Fine-Tuning of Vision Embeddings for Robust Large Vision-Language Models19 Feb
  8. 2024Safety of Multimodal Large Language Models on Images and Texts1 Feb
  9. 2024Red Teaming Visual Language Models23 Jan
  10. 2023FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts9 Nov
  11. 2023Can Language Models be Instructed to Protect Personal Information?3 Oct
  12. 2023How Robust is Google's Bard to Adversarial Image Attacks?21 Sep
2 more
  1. 2023Visual Adversarial Examples Jailbreak Aligned Large Language Models22 Jun
  2. 2023On Evaluating Adversarial Robustness of Large Vision-Language Models26 May

Other references · 70

  1. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  2. 2023GPT-4 Technical Reportcited by 18,396
  3. 2014Microsoft COCO: Common Objects in Contextcited by 17,608
  4. 2022Training language models to follow instructions with human feedbackcited by 15,971
  5. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
  6. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  7. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
  8. 2023Visual Instruction Tuningcited by 7,869
  9. 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,330
  10. 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
  11. 2023Mistral 7Bcited by 3,164
  12. 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
38 more
  1. 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
  2. 2023InstructBLIP: Towards General-purpose Vision-Language Models with Instruction Tuningcited by 2,876
  3. 2023MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Modelscited by 2,711
  4. 2023InternVL: Scaling up Vision Foundation Models and Aligning for Generic Visual-Linguistic Taskscited by 2,565
  5. 2016Making the V in VQA Matter: Elevating the Role of Image Understanding in Visual Question Answeringcited by 2,516
  6. 2023MMBench: Is Your Multi-modal Model an All-around Player?cited by 2,141
  7. 2023MMMU: A Massive Multi-discipline Multimodal Understanding and Reasoning Benchmark for Expert AGIcited by 2,080
  8. 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,917
  9. 2023Evaluating Object Hallucination in Large Vision-Language Modelscited by 1,729
  10. 2023MME: A Comprehensive Evaluation Benchmark for Multimodal Large Language Modelscited by 1,652
  11. 2019Theoretically Principled Trade-off between Robustness and Accuracycited by 1,517
  12. 2015Microsoft COCO Captions: Data Collection and Evaluation Servercited by 1,462
  13. 2023PaLM 2 Technical Reportcited by 1,162
  14. 2023ShareGPT4V: Improving Large Multi-Modal Models with Better Captionscited by 1,005
  15. 2023SEED-Bench: Benchmarking Multimodal LLMs with Generative Comprehensioncited by 940
  16. 2020StereoSet: Measuring stereotypical bias in pretrained language modelscited by 924
  17. 2024Are We on the Right Way for Evaluating Large Vision-Language Models?cited by 914
  18. 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
  19. 2018VizWiz Grand Challenge: Answering Visual Questions from Blind Peoplecited by 858
  20. 2024Cambrian-1: A Fully Open, Vision-Centric Exploration of Multimodal LLMscited by 838
  21. 2023CogVLM: Visual Expert for Pretrained Language Modelscited by 708
  22. 2023Mitigating Object Hallucinations in Large Vision-Language Models through Visual Contrastive Decodingcited by 688
  23. 2023Safe RLHF: Safe Reinforcement Learning from Human Feedbackcited by 656
  24. 2023mPLUG-Owl2: Revolutionizing Multi-modal Large Language Model with Modality Collaborationcited by 547
  25. 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 518
  26. 2022Diffusion Models for Adversarial Purificationcited by 476
  27. 2024Safety Alignment Should Be Made More Than Just a Few Tokens Deepcited by 472
  28. 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 434
  29. 2023RLHF-V: Towards Trustworthy MLLMs via Behavior Alignment from Fine-grained Correctional Human Feedbackcited by 412
  30. 2023Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignmentcited by 401
  31. 2024InternLM-XComposer2: Mastering Free-form Text-Image Composition and Comprehension in Vision-Language Large Modelcited by 326
  32. 2023Are aligned neural networks adversarially aligned?cited by 315
  33. 2024Deliberative Alignment: Reasoning Enables Safer Language Modelscited by 308
  34. 2024TrustLLM: Trustworthiness in Large Language Modelscited by 285
  35. 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 232
  36. 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 230
  37. 2023Do-Not-Answer: A Dataset for Evaluating Safeguards in LLMscited by 184
  38. 2024Safety Fine-Tuning at (Almost) No Cost: A Baseline for Vision Large Language Modelscited by 167

50 most cited of 70 All 70 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 3; 2026: 1.

4 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025SciTrust 2.0: A Comprehensive Framework for Evaluating Trustworthiness of Large Language Models in Scientific Applications
  2. 2025Mapping Trustworthiness in Large Language Models: A Bibliometric Analysis Bridging Theory to Practice
  3. 2024MLLMGuard: A Multi-dimensional Safety Evaluation Suite for Multimodal Large Language Models
  4. 2026Benchmarking Trustworthiness of SLMs: Pre-trained vs. Compressed
  5. 2023On the Trustworthiness Landscape of State-of-the-art Generative Models: A Survey and Outlook
  6. 2024Towards Tracing Trustworthiness Dynamics: Revisiting Pre-training Period of Large Language Models
  7. 2025USB: A Comprehensive and Unified Safety Evaluation Benchmark for Multimodal Large Language Models
  8. 2025A Survey on Privacy Risks and Protection in Large Language Models