mlsanityData to 14 Oct 2026

Do Not Merge My Model! Safeguarding Open-Source LLMs Against Unauthorized Model Merging

arXiv 2511.10712 ↗First posted 13 Nov 2025cs.CR cs.AIcited by 2

Not on the map. Why?

Abstract (arXiv)

Model merging has emerged as an efficient technique for expanding large language models (LLMs) by integrating specialized expert models. However, it also introduces a new threat: model merging stealing, where free-riders exploit models through unauthorized model merging. Unfortunately, existing defense mechanisms fail to provide effective protection. Specifically, we identify three critical protection properties that existing methods fail to simultaneously satisfy: (1) proactively preventing unauthorized merging; (2) ensuring compatibility with general open-source settings; (3) achieving high security with negligible performance loss. To address the above issues, we propose MergeBarrier, a plug-and-play defense that proactively prevents unauthorized merging. The core design of MergeBarrier is to disrupt the Linear Mode Connectivity (LMC) between the protected model and its homologous counterparts, thereby eliminating the low-loss path required for effective model merging. Extensive experiments show that MergeBarrier effectively prevents model merging stealing with negligible accuracy loss.

Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 22 of its 34 references that are in the map. First posted on arXiv 13 Nov 2025.

Builds on

22 of 34 references.

References · 22

  1. 2017Attention Is All You Needcited by 60,361
  2. 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
  3. 2021Training Verifiers to Solve Math Word Problemscited by 10,109
  4. 2021Program Synthesis with Large Language Modelscited by 3,637
  5. 2023Code Llama: Open Foundation Models for Codecited by 2,139
  6. 2017Sigmoid-Weighted Linear Units for Neural Network Function Approximation in Reinforcement Learningcited by 950
  7. 2023TIES-Merging: Resolving Interference When Merging Modelscited by 818
  8. 2023Language Models are Super Mario: Absorbing Abilities from Homologous Models as a Free Lunchcited by 694
  9. 2024Parameter-Efficient Fine-Tuning for Large Models: A Comprehensive Surveycited by 656
  10. 2023WizardMath: Empowering Mathematical Reasoning for Large Language Models via Reinforced Evol-Instructcited by 625
  11. 2022Git Re-Basin: Merging Models modulo Permutation Symmetriescited by 471
  12. 2020Entangled Watermarks as a Defense against Model Extractioncited by 149
10 more
  1. 2024Language Models are Homer Simpson! Safety Re-Alignment of Fine-tuned Language Models through Task Arithmeticcited by 112
  2. 2023Offsite-Tuning: Transfer Learning without Full Modelcited by 78
  3. 2023Knowledge Transfer from High-Resource to Low-Resource Programming Languages for Code LLMscited by 45
  4. 2018MLCapsule: Guarded Offline Deployment of Machine Learning as a Servicecited by 31
  5. 2024Here's a Free Lunch: Sanitizing Backdoored Models with Model Mergecited by 26
  6. 2023No Privacy Left Outside: On the (In-)Security of TEE-Shielded DNN Partition for On-Device MLcited by 21
  7. 2024Have You Merged My Model? On The Robustness of Large Language Model IP Protection Methods Against Model Mergingcited by 19
  8. 2021Teacher Model Fingerprinting Attacks Against Transfer Learningcited by 16
  9. 2024TransLinkGuard: Safeguarding Transformer Models Against Model Stealing in Edge Deploymentcited by 11
  10. 2025Disrupting Model Merging: A Parameter-Level Defense Without Sacrificing Accuracycited by 11

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 1.

2 papers.