When Safe Unimodal Inputs Collide: Optimizing Reasoning Chains for Cross-Modal Safety in Multimodal Large Language Models
On the map: LLM reasoning → Reasoning for agents, planning and code
also in 2 more
Abstract (arXiv)
Multimodal Large Language Models (MLLMs) are susceptible to the implicit reasoning risk, wherein innocuous unimodal inputs synergistically assemble into risky multimodal data that produce harmful outputs. We attribute this vulnerability to the difficulty of MLLMs maintaining safety alignment through long-chain reasoning. To address this issue, we introduce Safe-Semantics-but-Unsafe-Interpretation (SSUI), the first dataset featuring interpretable reasoning paths tailored for such a cross-modal challenge. A novel training framework, Safety-aware Reasoning Path Optimization (SRPO), is also designed based on the SSUI dataset to align the MLLM's internal reasoning process with human safety values. Experimental results show that our SRPO-trained models achieve state-of-the-art results on key safety benchmarks, including the proposed Reasoning Path Benchmark (RSBench), significantly outperforming both open-source and top-tier commercial MLLMs.
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 23 of its 24 references that are in the map. First posted on arXiv 15 Sep 2025.
Builds on
23 of 24 references.
References · 23
- 2014Microsoft COCO: Common Objects in Contextcited by 17,608
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2017Proximal Policy Optimization Algorithmscited by 15,215
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2025Qwen2.5-VL Technical Reportcited by 5,587
- 2023Improved Baselines with Visual Instruction Tuningcited by 4,418
- 2024Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolutioncited by 4,234
- 2023Qwen Technical Reportcited by 3,344
- 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,224
- 2023InternVL: Scaling up Vision Foundation Models and Aligning for Generic Visual-Linguistic Taskscited by 2,565
- 2024ChatGLM: A Family of Large Language Models from GLM-130B to GLM-4 All Toolscited by 1,121
- 2024MiniCPM-V: A GPT-4V Level MLLM on Your Phonecited by 1,079
11 more
- 2025Does Reinforcement Learning Really Incentivize Reasoning Capacity in LLMs Beyond the Base Model?cited by 982
- 2024SimPO: Simple Preference Optimization with a Reference-Free Rewardcited by 963
- 2023Multimodal Chain-of-Thought Reasoning in Language Modelscited by 752
- 2024DeepSeek-VL: Towards Real-World Vision-Language Understandingcited by 733
- 2023VILA: On Pre-training for Visual Language Modelscited by 692
- 2024ORPO: Monolithic Preference Optimization without Reference Modelcited by 562
- 2023FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Promptscited by 398
- 2023Visual Adversarial Examples Jailbreak Aligned Large Language Modelscited by 328
- 2023Deductive Verification of Chain-of-Thought Reasoningcited by 124
- 2024MLLM-Protector: Ensuring MLLM's Safety without Hurting Performancecited by 117
- 2024MOSSBench: Is Your Multimodal Language Model Oversensitive to Safe Queries?cited by 30
Built on by
Citing papers per year: 2025: 3; 2026: 1.
4 papers.
- 2025TeleAI-Safety: A comprehensive LLM jailbreaking benchmark towards attacks, defenses, and evaluationscited by 7
- 2025Aetheria: A multimodal interpretable content safety framework based on multi-agent debate and collaborationcited by 2
- 2025Visual Attention Reasoning via Hierarchical Search and Self-Verificationcited by 0
- 2026CaLR: Causal Latent Revision for Robust Diffusion Reasoningcited by 0
- 2026CaLR: Causal Latent Revision for Robust Diffusion Reasoning17 Sep 2026
- 2025TeleAI-Safety: A comprehensive LLM jailbreaking benchmark towards attacks, defenses, and evaluations5 Dec 2025
- 2025Aetheria: A multimodal interpretable content safety framework based on multi-agent debate and collaboration2 Dec 2025
- 2025Visual Attention Reasoning via Hierarchical Search and Self-Verification21 Oct 2025
Similar, not cited
Close in wording, no citation either way
- 2025SafeMLRM: Demystifying Safety in Multi-modal Large Reasoning Models
- 2025SafeGRPO: Self-Rewarded Multimodal Safety Alignment via Rule-Governed Policy Optimization
- 2026MME-Safety: A Fine-grained Benchmark for Safety Evaluation of MLLMs
- 2025SaFeR-VLM: Toward Safety-aware Fine-grained Reasoning in Multimodal Models
- 2025Safe Semantics, Unsafe Interpretations: Tackling Implicit Reasoning Safety in Large Vision-Language Models
- 2026Evolving Safety Landscape of Multi-modal Large Language Models: A Survey of Emerging Threats and Safeguards
- 2025Automating Steering for Safe Multimodal Large Language Models
- 2026MCBench: A Multicontext Safety Assessment Benchmark for Omni Large Language Models