MLLMEraser: Achieving Test-Time Unlearning in Multimodal Large Language Models through Activation Steering
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
also in 2 more
Abstract (arXiv)
Multimodal large language models (MLLMs) have demonstrated remarkable capabilities across vision-language tasks, yet their large-scale deployment raises pressing concerns about memorized private data, outdated knowledge, and harmful content. Existing unlearning approaches for MLLMs typically adapt training-based strategies such as gradient ascent or preference optimization, but these methods are computationally expensive, irreversible, and often distort retained knowledge. In this work, we propose MLLMEraser, an input-aware, training-free framework for test-time unlearning. Our approach leverages activation steering to enable dynamic knowledge erasure without parameter updates. Specifically, we construct a multimodal erasure direction by contrasting adversarially perturbed, knowledge-recall image-text pairs with knowledge-erasure counterparts, capturing both textual and visual discrepancies. To prevent unnecessary interference, we further design an input-aware steering mechanism that adaptively determines when and how the erasure direction should be applied, preserving utility on retained knowledge while enforcing forgetting on designated content. Experiments on LLaVA-1.5 and Qwen-2.5-VL demonstrate that MLLMEraser consistently outperforms state-of-the-art MLLM unlearning baselines, achieving stronger forgetting performance with lower computational cost and minimal utility degradation.
Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 68 of its 77 references that are in the map. First posted on arXiv 5 Oct 2025.
Builds on
68 of 77 references.
Closest ancestors · 12
Same direction, newest first
- 2025Automating Steering for Safe Multimodal Large Language Models17 Jul
- 2025SafeMLRM: Demystifying Safety in Multi-modal Large Reasoning Models9 Apr
- 2025Modality-Aware Neuron Pruning for Unlearning in Multimodal Large Language Models21 Feb
- 2025SafeEraser: Enhancing Safety in Multimodal Large Language Models through Multimodal Machine Unlearning18 Feb
- 2025MMUnlearner: Reformulating Multimodal Machine Unlearning in the Era of Multimodal Large Language Models16 Feb
- 2024Steering Away from Harm: An Adaptive Approach to Defending Vision Language Model Against Jailbreaks23 Nov
- 2024Protecting Privacy in Multimodal Large Language Models with MLLMU-Bench29 Oct
- 2024Refusing Safe Prompts for Multi-modal Large Language Models12 Jul
- 2024Cross-Modal Safety Alignment: Is textual unlearning all you need?27 May
- 2024Single Image Unlearning: Efficient Machine Unlearning in Multimodal Large Language Models21 May
- 2024Safety of Multimodal Large Language Models on Images and Texts1 Feb
- 2023Visual Adversarial Examples Jailbreak Aligned Large Language Models22 Jun
Other references · 56
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2023Visual Instruction Tuningcited by 7,869
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2025Qwen2.5-VL Technical Reportcited by 5,587
- 2022Flamingo: a Visual Language Model for Few-Shot Learningcited by 4,386
- 2024Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolutioncited by 4,234
- 2023MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Modelscited by 2,711
- 2022Editing Models with Task Arithmeticcited by 1,120
- 2023Steering Llama 2 via Contrastive Activation Additioncited by 1,085
- 2024Refusal in Language Models Is Mediated by a Single Directioncited by 1,032
- 2023Steering Language Models With Activation Engineeringcited by 922
- 2023The Linear Representation Hypothesis and the Geometry of Large Language Modelscited by 716
38 more
- 2023The Dawn of LMMs: Preliminary Explorations with GPT-4V(ision)cited by 681
- 2024TOFU: A Task of Fictitious Unlearning for LLMscited by 533
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearningcited by 504
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 386
- 2021Unrolling SGD: Understanding Factors Influencing Machine Unlearningcited by 279
- 2024AlphaEdit: Null-Space Constrained Knowledge Editing for Language Modelscited by 236
- 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 224
- 2024Programming Refusal with Conditional Activation Steeringcited by 206
- 2024Towards Safer Large Language Models through Machine Unlearningcited by 139
- 2022Continual Learning and Private Unlearningcited by 130
- 2023BLIVA: A Simple Multimodal LLM for Better Handling of Text-Rich Visual Questionscited by 125
- 2020Variational Bayesian Unlearningcited by 117
- 2025The Geometry of Refusal in Large Language Models: Concept Cones and Representational Independencecited by 115
- 2024Arc2Face: A Foundation Model for ID-Consistent Human Facescited by 101
- 2023KGA: A General Machine Unlearning Framework Based on Knowledge Gap Alignmentcited by 99
- 2024Guardrail Baselines for Unlearning in LLMscited by 96
- 2023DEPN: Detecting and Editing Privacy Neurons in Pretrained Language Modelscited by 79
- 2024Adaptive Activation Steering: A Tuning-Free LLM Truthfulness Improvement Method for Diverse Hallucinations Categoriescited by 77
- 2024Natural Language Understanding and Inference with MLLM in Visual Question Answering: A Surveycited by 76
- 2025Understanding Reasoning in Thinking Language Models via Steering Vectorscited by 72
- 2024Text4Seg: Reimagining Image Segmentation as Text Generationcited by 61
- 2025EmbodiedEval: Evaluate Multimodal LLMs as Embodied Agentscited by 57
- 2025AlphaSteer: Learning Refusal Steering with Principled Null-Space Constraintcited by 49
- 2024Unified Gradient-Based Machine Unlearning with Remain Geometry Enhancementcited by 45
- 2024CLEAR: Character Unlearning in Textual and Visual Modalitiescited by 39
- 2025AdaSteer: Your Aligned LLM is Inherently an Adaptive Jailbreak Defendercited by 38
- 2024Revisiting Who's Harry Potter: Towards Targeted Unlearning from a Causal Intervention Perspectivecited by 36
- 2025Unlocking General Long Chain-of-Thought Reasoning Capabilities of Large Language Models via Representation Engineeringcited by 36
- 2025Evaluating and Steering Modality Preferences in Multimodal Large Language Modelcited by 33
- 2024Erasing Concepts from Text-to-Image Diffusion Models with Few-shot Unlearningcited by 29
- 2024Unified Parameter-Efficient Unlearning for LLMscited by 25
- 2024Avoiding Copyright Infringement via Large Language Model Unlearningcited by 24
- 2025ReLearn: Unlearning via Learning for Large Language Modelscited by 22
- 2025The Reasoning-Memorization Interplay in Language Models Is Mediated by a Single Directioncited by 21
- 2024CLIPErase: Efficient Unlearning of Visual-Textual Associations in CLIPcited by 19
- 2024Cross-Modal Consistency in Multimodal Large Language Modelscited by 19
- 2024EFUF: Efficient Fine-grained Unlearning Framework for Mitigating Hallucinations in Multimodal Large Language Modelscited by 17
- 2025ThinkEdit: Interpretable Weight Editing to Mitigate Overly Short Thinking in Reasoning Modelscited by 17
50 most cited of 56 All 56 (JSON)
Built on by
Citing papers per year: 2026: 10.
10 papers.
- 2026AMPS: Adaptive Modality Preference Steering via Functional Entropycited by 4
- 2026Suppression Is Not Forgetting: Residual Recoverability in Visual Concept Unlearning for VLMscited by 1
- 2026ASRU: Activation Steering Meets Reinforcement Unlearning for Multimodal Large Language Modelscited by 1
- 2026On the Robustness of Machine Unlearning for Vision-Language Modelscited by 1
- 2026Teaching Large Language Models When Not to Know: Learning Temporal Critique for Ex-Ante Reasoningcited by 0
- 2026Toward Fine-Grained Forgetting:Attribute Unlearning for Multimodal Large Language Modelscited by 0
- 2026SCOPE: Entanglement Frontier Escape for Source-Free Class Unlearningcited by 0
- 2026Do LLMs Really Forget? Hidden-State Leakage in Model Unlearning and How to Fix itcited by 0
- 2026Open-MMUnlearning: Unifying Methods and Evaluation for MLLM Unlearningcited by 0
- 2026CUSE: Fine-Grained Multimodal Unlearning with Counterfactual Guidance and On-Policy Self-Distillationcited by 0
- 2026CUSE: Fine-Grained Multimodal Unlearning with Counterfactual Guidance and On-Policy Self-Distillation10 Oct 2026
- 2026Open-MMUnlearning: Unifying Methods and Evaluation for MLLM Unlearning7 Oct 2026
- 2026Do LLMs Really Forget? Hidden-State Leakage in Model Unlearning and How to Fix it29 Sep 2026
- 2026SCOPE: Entanglement Frontier Escape for Source-Free Class Unlearning3 Aug 2026
- 2026Toward Fine-Grained Forgetting:Attribute Unlearning for Multimodal Large Language Models2 Aug 2026
- 2026On the Robustness of Machine Unlearning for Vision-Language Models26 May 2026
- 2026ASRU: Activation Steering Meets Reinforcement Unlearning for Multimodal Large Language Models15 May 2026
- 2026Teaching Large Language Models When Not to Know: Learning Temporal Critique for Ex-Ante Reasoning14 May 2026
- 2026Suppression Is Not Forgetting: Residual Recoverability in Visual Concept Unlearning for VLMs3 Apr 2026
- 2026AMPS: Adaptive Modality Preference Steering via Functional Entropy13 Feb 2026
Similar, not cited
Close in wording, no citation either way
- 2026Visual-Noise Guided In-Context Distillation for Multimodal Large Language Model Unlearning
- 2025Towards Benign Memory Forgetting for Selective Multimodal Large Language Model Unlearning
- 2026Exploring and Bridging Knowledge Holes in Unlearned Multimodal Large Language Models
- 2025PEBench: A Fictitious Dataset to Benchmark Machine Unlearning for Multimodal Large Language Models
- 2026Knowledge Vector Weakening: Efficient Training-free Unlearning for Large Vision-Language Models
- 2025Towards Reasoning-Preserving Unlearning in Multimodal Large Language Models
- 2026Stochastic Meta-Unlearning: Bridging Language Backbone and Multimodal Unlearning
- 2025AUVIC: Adversarial Unlearning of Visual Concepts for Multi-modal Large Language Models