SafeGRPO: Self-Rewarded Multimodal Safety Alignment via Rule-Governed Policy Optimization
On the map: LLM reasoning → Reasoning for agents, planning and code
also in 3 more
Abstract (arXiv)
Multimodal large language models (MLLMs) have demonstrated impressive reasoning and instruction-following capabilities, yet their expanded modality space introduces new compositional safety risks that emerge from complex text-image interactions. Such cross-modal couplings can produce unsafe semantics even when individual inputs are benign, exposing the fragile safety awareness of current MLLMs. While recent works enhance safety by guiding models to reason about potential risks, unregulated reasoning traces may compromise alignment; although Group Relative Policy Optimization (GRPO) offers self-rewarded refinement without human supervision, it lacks verifiable signals for reasoning safety. To address this, we propose SafeGRPO a self-rewarded multimodal safety alignment framework that integrates rule-governed reward construction into GRPO, enabling interpretable and verifiable optimization of reasoning safety. Built upon the constructed SafeTag-VL-3K dataset with explicit visual, textual, and combined safety tags, SafeGRPO performs step-guided safety thinking to enforce structured reasoning and behavior alignment, substantially improving multimodal safety awareness, compositional robustness, and reasoning stability across diverse benchmarks without sacrificing general capabilities.
Key facts. Cited by 12 papers in the map (data through 14 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 50 of its 54 references that are in the map. First posted on arXiv 17 Nov 2025.
Builds on
50 of 54 references.
Closest ancestors · 8
Same direction, newest first
- 2025GuardReasoner-VL: Safeguarding VLMs via Reinforced Reasoning16 May
- 2025Think in Safety: Unveiling and Mitigating Safety Alignment Collapse in Multimodal Large Reasoning Model10 May
- 2025RealSafe-R1: Safety-Aligned DeepSeek-R1 without Compromising Reasoning Capability14 Apr
- 2025Safety Tax: Safety Alignment Makes Your Large Reasoning Models Less Reasonable1 Mar
- 2025SafeChain: Safety of Language Models with Long Chain-of-Thought Reasoning Capabilities17 Feb
- 2025STAIR: Improving Safety Alignment with Introspective Reasoning4 Feb
- 2025Rethinking Bottlenecks in Safety Fine-Tuning of Vision Language Models30 Jan
- 2024Eyes Closed, Safety On: Protecting Multimodal LLMs via Image-to-Text Transformation14 Mar
Other references · 42
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2023GPT-4 Technical Reportcited by 18,396
- 2017Proximal Policy Optimization Algorithmscited by 15,215
- 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2023Visual Instruction Tuningcited by 7,869
- 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,137
- 2024LLaVA-OneVision: Easy Visual Task Transfercited by 2,719
- 2024HybridFlow: A Flexible and Efficient RLHF Frameworkcited by 2,057
- 2022Learn to Explain: Multimodal Reasoning via Thought Chains for Science Question Answeringcited by 1,919
- 2023Evaluating Object Hallucination in Large Vision-Language Modelscited by 1,729
- 2023MathVista: Evaluating Mathematical Reasoning of Foundation Models in Visual Contextscited by 1,614
30 more
- 2024Expanding Performance Boundaries of Open-Source Multimodal Models with Model, Data, and Test-Time Scalingcited by 1,599
- 2024LlamaFactory: Unified Efficient Fine-Tuning of 100+ Language Modelscited by 1,464
- 2023MM-Vet: Evaluating Large Multimodal Models for Integrated Capabilitiescited by 1,239
- 2023A Survey on Multimodal Large Language Modelscited by 909
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
- 2025Vision-R1: Incentivizing Reasoning Capability in Multimodal Large Language Modelscited by 665
- 2023FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Promptscited by 398
- 2023MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Modelscited by 274
- 2023Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Modelscited by 273
- 2021IconQA: A New Benchmark for Abstract Diagram Understanding and Visual Language Reasoningcited by 267
- 2024Safety Fine-Tuning at (Almost) No Cost: A Baseline for Vision Large Language Modelscited by 167
- 2024Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking Multimodal Large Language Modelscited by 136
- 2024AdaShield: Safeguarding Multimodal Large Language Models from Structure-based Attack via Adaptive Shield Promptingcited by 125
- 2024MLLM-Protector: Ensuring MLLM's Safety without Hurting Performancecited by 117
- 2024SPA-VL: A Comprehensive Safety Preference Alignment Dataset for Vision Language Modelcited by 85
- 2024Visual-RolePlay: Universal Jailbreak Attack on MultiModal Large Language Models via Role-playing Image Charactercited by 68
- 2025A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluationscited by 67
- 2024Jailbreak Large Vision-Language Models Through Multi-Modal Linkagecited by 62
- 2025Efficient Inference for Large Reasoning Models: A Surveycited by 61
- 2024ETA: Evaluating Then Aligning Safety of Vision Language Models at Inference Timecited by 60
- 2024An Image Is Worth 1000 Lies: Adversarial Transferability across Prompts on Vision-Language Modelscited by 45
- 2025Backdoor Cleaning without External Guidance in MLLM Fine-tuningcited by 35
- 2024CoCA: Regaining Safety-awareness of Multimodal Large Language Models with Constitutional Calibrationcited by 31
- 2024MOSSBench: Is Your Multimodal Language Model Oversensitive to Safe Queries?cited by 30
- 2024Safe Inputs but Unsafe Output: Benchmarking Cross-modality Safety Alignment of Large Vision-Language Modelcited by 26
- 2024Cross-modality Information Check for Detecting Jailbreaking in Multimodal Large Language Modelscited by 25
- 2025Optimizing Safe and Aligned Language Generation: A Multi-Objective GRPO Approachcited by 24
- 2024Cross-Modal Safety Mechanism Transfer in Large Vision-Language Modelscited by 19
- 2025LoRASculpt: Sculpting LoRA for Harmonizing General and Specialized Knowledge in Multimodal Large Language Modelscited by 11
- 2025Semantically-Aware Rewards for Open-Ended R1 Training in Free-Form Generationcited by 11
Built on by
Citing papers per year: 2026: 12.
12 papers.
- 2026EMO-R3: Reflective Reinforcement Learning for Emotional Reasoning in Multimodal Large Language Modelscited by 5
- 2026Harmony in Diversity: Multi-domain Contrastive Policy Optimization for Large Reasoning Modelscited by 2
- 2026SafeCap: Improving LVLM Safety with Image Captioning Reinforcement Learningcited by 1
- 2026EviSafe: Evidence-Grounded Safety Evaluation for Vision-Language Modelscited by 1
- 2026Towards Multi-modal Multi-turn Safety: From Agentic Interaction to Strategic Alignmentcited by 0
- 2026SaFeR-ToolKit: Structured Reasoning via Virtual Tool Calling for Multimodal Safetycited by 0
- 2026Switch-Reasoner: Learn When to Think in Multitask Mixtures via Reinforcement Learningcited by 0
- 2026ReFrame: Evidence-Guided Test-Time Safety Alignment in Multimodal Large Language Modelscited by 0
- 2026HazardAuditor: From Executable Threats to Safer Computer-Use Agentscited by 0
- 2026A2Safe: Counterfactual Evidence-Aligned Adaptive Agent Collaboration for Safe and Effective Visual Question Answeringcited by 0
- 2026Can Vision-Language Models Stay Helpful When Facing Implicit Risks? Intent-Privilege OPSD for Efficient Safety-Helpfulness Alignmentcited by 0
- 2026Visual Grounding Safety in Vision-Language Modelscited by 0
- 2026Visual Grounding Safety in Vision-Language Models5 Oct 2026
- 2026Can Vision-Language Models Stay Helpful When Facing Implicit Risks? Intent-Privilege OPSD for Efficient Safety-Helpfulness Alignment29 Sep 2026
- 2026A2Safe: Counterfactual Evidence-Aligned Adaptive Agent Collaboration for Safe and Effective Visual Question Answering21 Sep 2026
- 2026HazardAuditor: From Executable Threats to Safer Computer-Use Agents14 Sep 2026
- 2026EviSafe: Evidence-Grounded Safety Evaluation for Vision-Language Models24 Aug 2026
- 2026ReFrame: Evidence-Guided Test-Time Safety Alignment in Multimodal Large Language Models21 Aug 2026
- 2026SafeCap: Improving LVLM Safety with Image Captioning Reinforcement Learning11 Aug 2026
- 2026Switch-Reasoner: Learn When to Think in Multitask Mixtures via Reinforcement Learning9 Jul 2026
- 2026Harmony in Diversity: Multi-domain Contrastive Policy Optimization for Large Reasoning Models25 May 2026
- 2026SaFeR-ToolKit: Structured Reasoning via Virtual Tool Calling for Multimodal Safety3 Mar 2026
- 2026EMO-R3: Reflective Reinforcement Learning for Emotional Reasoning in Multimodal Large Language Models27 Feb 2026
- 2026Towards Multi-modal Multi-turn Safety: From Agentic Interaction to Strategic Alignment8 Jan 2026
Similar, not cited
Close in wording, no citation either way
- 2025MSR-Align: Policy-Grounded Multimodal Alignment for Safety-Aware Reasoning in Vision-Language Models
- 2025SaFeR-VLM: Toward Safety-aware Fine-grained Reasoning in Multimodal Models
- 2025When Safe Unimodal Inputs Collide: Optimizing Reasoning Chains for Cross-Modal Safety in Multimodal Large Language Models
- 2026OOD-MMSafe: Advancing MLLM Safety from Harmful Intent to Hidden Consequences
- 2025Think-Reflect-Revise: A Policy-Guided Reflective Framework for Safety Alignment in Large Vision Language Models
- 2026DeShortcut-Align: Decoupling Spurious Shortcuts for Robust Safety Alignment in Large Reasoning Models
- 2025AlphaAlign: Incentivizing Safety Alignment with Extremely Simplified Reinforcement Learning
- 2025VisuoAlign: Safety Alignment of LVLMs with Multimodal Tree Search