mlsanityData to 14 Oct 2026

MLLMEraser: Achieving Test-Time Unlearning in Multimodal Large Language Models through Activation Steering

arXiv 2510.04217 ↗First posted 5 Oct 2025cs.LG cs.AIcited by 10

On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness

also in 2 more
Abstract (arXiv)

Multimodal large language models (MLLMs) have demonstrated remarkable capabilities across vision-language tasks, yet their large-scale deployment raises pressing concerns about memorized private data, outdated knowledge, and harmful content. Existing unlearning approaches for MLLMs typically adapt training-based strategies such as gradient ascent or preference optimization, but these methods are computationally expensive, irreversible, and often distort retained knowledge. In this work, we propose MLLMEraser, an input-aware, training-free framework for test-time unlearning. Our approach leverages activation steering to enable dynamic knowledge erasure without parameter updates. Specifically, we construct a multimodal erasure direction by contrasting adversarially perturbed, knowledge-recall image-text pairs with knowledge-erasure counterparts, capturing both textual and visual discrepancies. To prevent unnecessary interference, we further design an input-aware steering mechanism that adaptively determines when and how the erasure direction should be applied, preserving utility on retained knowledge while enforcing forgetting on designated content. Experiments on LLaVA-1.5 and Qwen-2.5-VL demonstrate that MLLMEraser consistently outperforms state-of-the-art MLLM unlearning baselines, achieving stronger forgetting performance with lower computational cost and minimal utility degradation.

Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 68 of its 77 references that are in the map. First posted on arXiv 5 Oct 2025.

Builds on

68 of 77 references.

Closest ancestors · 12

Same direction, newest first

  1. 2025Automating Steering for Safe Multimodal Large Language Models17 Jul
  2. 2025SafeMLRM: Demystifying Safety in Multi-modal Large Reasoning Models9 Apr
  3. 2025Modality-Aware Neuron Pruning for Unlearning in Multimodal Large Language Models21 Feb
  4. 2025SafeEraser: Enhancing Safety in Multimodal Large Language Models through Multimodal Machine Unlearning18 Feb
  5. 2025MMUnlearner: Reformulating Multimodal Machine Unlearning in the Era of Multimodal Large Language Models16 Feb
  6. 2024Steering Away from Harm: An Adaptive Approach to Defending Vision Language Model Against Jailbreaks23 Nov
  7. 2024Protecting Privacy in Multimodal Large Language Models with MLLMU-Bench29 Oct
  8. 2024Refusing Safe Prompts for Multi-modal Large Language Models12 Jul
  9. 2024Cross-Modal Safety Alignment: Is textual unlearning all you need?27 May
  10. 2024Single Image Unlearning: Efficient Machine Unlearning in Multimodal Large Language Models21 May
  11. 2024Safety of Multimodal Large Language Models on Images and Texts1 Feb
  12. 2023Visual Adversarial Examples Jailbreak Aligned Large Language Models22 Jun

Other references · 56

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  2. 2023Visual Instruction Tuningcited by 7,869
  3. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  4. 2025Qwen2.5-VL Technical Reportcited by 5,587
  5. 2022Flamingo: a Visual Language Model for Few-Shot Learningcited by 4,386
  6. 2024Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolutioncited by 4,234
  7. 2023MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Modelscited by 2,711
  8. 2022Editing Models with Task Arithmeticcited by 1,120
  9. 2023Steering Llama 2 via Contrastive Activation Additioncited by 1,085
  10. 2024Refusal in Language Models Is Mediated by a Single Directioncited by 1,032
  11. 2023Steering Language Models With Activation Engineeringcited by 922
  12. 2023The Linear Representation Hypothesis and the Geometry of Large Language Modelscited by 716
38 more
  1. 2023The Dawn of LMMs: Preliminary Explorations with GPT-4V(ision)cited by 681
  2. 2024TOFU: A Task of Fictitious Unlearning for LLMscited by 533
  3. 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearningcited by 504
  4. 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 386
  5. 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearningcited by 279
  6. 2024AlphaEdit: Null-Space Constrained Knowledge Editing for Language Modelscited by 236
  7. 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 224
  8. 2024Programming Refusal with Conditional Activation Steeringcited by 206
  9. 2024Towards Safer Large Language Models through Machine Unlearningcited by 139
  10. 2022Continual Learning and Private Unlearningcited by 130
  11. 2023BLIVA: A Simple Multimodal LLM for Better Handling of Text-Rich Visual Questionscited by 125
  12. 2020Variational Bayesian Unlearningcited by 117
  13. 2025The Geometry of Refusal in Large Language Models: Concept Cones and Representational Independencecited by 115
  14. 2024Arc2Face: A Foundation Model for ID-Consistent Human Facescited by 101
  15. 2023KGA: A General Machine Unlearning Framework Based on Knowledge Gap Alignmentcited by 99
  16. 2024Guardrail Baselines for Unlearning in LLMscited by 96
  17. 2023DEPN: Detecting and Editing Privacy Neurons in Pretrained Language Modelscited by 79
  18. 2024Adaptive Activation Steering: A Tuning-Free LLM Truthfulness Improvement Method for Diverse Hallucinations Categoriescited by 77
  19. 2024Natural Language Understanding and Inference with MLLM in Visual Question Answering: A Surveycited by 76
  20. 2025Understanding Reasoning in Thinking Language Models via Steering Vectorscited by 72
  21. 2024Text4Seg: Reimagining Image Segmentation as Text Generationcited by 61
  22. 2025EmbodiedEval: Evaluate Multimodal LLMs as Embodied Agentscited by 57
  23. 2025AlphaSteer: Learning Refusal Steering with Principled Null-Space Constraintcited by 49
  24. 2024Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancementcited by 45
  25. 2024CLEAR: Character Unlearning in Textual and Visual Modalitiescited by 39
  26. 2025AdaSteer: Your Aligned LLM is Inherently an Adaptive Jailbreak Defendercited by 38
  27. 2024Revisiting Who's Harry Potter: Towards Targeted Unlearning from a Causal Intervention Perspectivecited by 36
  28. 2025Unlocking General Long Chain-of-Thought Reasoning Capabilities of Large Language Models via Representation Engineeringcited by 36
  29. 2025Evaluating and Steering Modality Preferences in Multimodal Large Language Modelcited by 33
  30. 2024Erasing Concepts from Text-to-Image Diffusion Models with Few-shot Unlearningcited by 29
  31. 2024Unified Parameter-Efficient Unlearning for LLMscited by 25
  32. 2024Avoiding Copyright Infringement via Large Language Model Unlearningcited by 24
  33. 2025ReLearn: Unlearning via Learning for Large Language Modelscited by 22
  34. 2025The Reasoning-Memorization Interplay in Language Models Is Mediated by a Single Directioncited by 21
  35. 2024CLIPErase: Efficient Unlearning of Visual-Textual Associations in CLIPcited by 19
  36. 2024Cross-Modal Consistency in Multimodal Large Language Modelscited by 19
  37. 2024EFUF: Efficient Fine-grained Unlearning Framework for Mitigating Hallucinations in Multimodal Large Language Modelscited by 17
  38. 2025ThinkEdit: Interpretable Weight Editing to Mitigate Overly Short Thinking in Reasoning Modelscited by 17

50 most cited of 56 All 56 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 10.

10 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Visual-Noise Guided In-Context Distillation for Multimodal Large Language Model Unlearning
  2. 2025Towards Benign Memory Forgetting for Selective Multimodal Large Language Model Unlearning
  3. 2026Exploring and Bridging Knowledge Holes in Unlearned Multimodal Large Language Models
  4. 2025PEBench: A Fictitious Dataset to Benchmark Machine Unlearning for Multimodal Large Language Models
  5. 2026Knowledge Vector Weakening: Efficient Training-free Unlearning for Large Vision-Language Models
  6. 2025Towards Reasoning-Preserving Unlearning in Multimodal Large Language Models
  7. 2026Stochastic Meta-Unlearning: Bridging Language Backbone and Multimodal Unlearning
  8. 2025AUVIC: Adversarial Unlearning of Visual Concepts for Multi-modal Large Language Models