mlsanityData to 14 Oct 2026

CGCE: Classifier-Guided Concept Erasure in Generative Models

arXiv 2511.05865 ↗First posted 8 Nov 2025cs.CV cs.AI cs.CRcited by 3

On the map: LLM safety and security → Vision-language and text-to-image safety

Abstract (arXiv)

Recent advancements in large-scale generative models have enabled the creation of high-quality images and videos, but have also raised significant safety concerns regarding the generation of unsafe content. To mitigate this, concept erasure methods have been developed to remove undesirable concepts from pre-trained models. However, existing methods remain vulnerable to adversarial attacks that can regenerate the erased content. Moreover, achieving robust erasure often degrades the model's generative quality for safe, unrelated concepts, creating a difficult trade-off between safety and performance. To address this challenge, we introduce Classifier-Guided Concept Erasure (CGCE), an efficient plug-and-play framework that provides robust concept erasure for diverse generative models without altering their original weights. CGCE uses a lightweight classifier operating on text embeddings to first detect and then refine prompts containing undesired concepts. By modifying only unsafe embeddings at inference time, our method prevents harmful content generation while preserving the model's original quality on benign prompts. Extensive experiments show that CGCE achieves state-of-the-art robustness against a wide range of red-teaming attacks. Our approach also maintains high generative utility, demonstrating a superior balance between safety and performance. We showcase the versatility of CGCE through its successful application to various modern T2I and T2V models, establishing it as a practical and effective solution for safe generative AI.

Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Placed in Vision-language and text-to-image safety, one of 12 directions in LLM safety and security. Builds on 43 of its 55 references that are in the map. First posted on arXiv 8 Nov 2025.

Builds on

43 of 55 references.

Closest ancestors · 8

Same direction, newest first

  1. 2025T2VUnlearning: A Concept Erasing Method for Text-to-Video Diffusion Models23 May
  2. 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation16 Oct
  3. 2024STEREO: A Two-Stage Framework for Adversarially Robust Concept Erasing from Text-to-Image Diffusion Models29 Aug
  4. 2024Direct Unlearning Optimization for Robust and Safe Text-to-Image Models17 Jul
  5. 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct
  6. 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
  7. 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Prompts12 Sep
  8. 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar

Other references · 35

  1. 2017Attention Is All You Needcited by 60,361
  2. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  3. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  4. 2014Microsoft COCO: Common Objects in Contextcited by 17,608
  5. 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
  6. 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,177
  7. 2022Classifier-Free Diffusion Guidancecited by 5,847
  8. 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,356
  9. 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,181
  10. 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
  11. 2025Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilitiescited by 3,796
  12. 2024CogVideoX: Text-to-Video Diffusion Models with An Expert Transformercited by 2,261
23 more
  1. 2022Imagen Video: High Definition Video Generation with Diffusion Modelscited by 1,778
  2. 2024HunyuanVideo: A Systematic Framework For Large Video Generative Modelscited by 1,660
  3. 2023Erasing Concepts from Diffusion Modelscited by 539
  4. 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 513
  5. 2023Unified Concept Editing in Diffusion Modelscited by 388
  6. 2024MACE: Mass Concept Erasure in Diffusion Modelscited by 307
  7. 2024Infinity: Scaling Bitwise AutoRegressive Modeling for High-Resolution Image Synthesiscited by 304
  8. 2019Representation Degeneration Problem in Training Natural Language Generation Modelscited by 255
  9. 2023MMA-Diffusion: MultiModal Attack on Diffusion Modelscited by 194
  10. 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 177
  11. 2023Debiasing Vision-Language Models via Biased Promptscited by 149
  12. 2022The Privacy Onion Effect: Memorization is Relativecited by 136
  13. 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Modelscited by 133
  14. 2024EraseAnything: Enabling Concept Erasure in Rectified Flow Transformerscited by 95
  15. 2024Latent Guard: a Safety Framework for Text-to-image Generationcited by 71
  16. 2024R.A.C.E.: Robust Adversarial Concept Erasure for Secure Text-to-Image Diffusion Modelcited by 58
  17. 2024SafeSora: Towards Safety Alignment of Text2Video Generation via a Human Preference Datasetcited by 35
  18. 2024Switti: Designing Scale-Wise Transformers for Text-to-Image Synthesiscited by 33
  19. 2025VideoEraser: Concept Erasure in Text-to-Video Diffusion Modelscited by 14
  20. 2025EraseFlow: Learning Concept Erasure Policies via GFlowNet-Driven Alignmentcited by 9
  21. 2024Supercharged One-step Text-to-Image Diffusion Models with Negative Promptscited by 8
  22. 2025Improved Training Technique for Shortcut Modelscited by 6
  23. 2023On Inference Stability for Diffusion Modelscited by 4

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 3.

3 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Minimalist Concept Erasure in Generative Models
  2. 2025A Comprehensive Survey on Concept Erasure in Text-to-Image Diffusion Models
  3. 2026Concept Score Relearning: A Unified Cross-Architecture Attack on Concept Erasure
  4. 2025Now You See It, Now You Don't - Instant Concept Erasure for Safe Text-to-Image and Video Generation
  5. 2026Prototype-Guided Concept Erasure in Diffusion Models
  6. 2025Rethinking the Vulnerability of Concept Erasure and a New Method
  7. 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppression
  8. 2024ConceptPrune: Concept Editing in Diffusion Models via Skilled Neuron Pruning