Red Teaming Large Reasoning Models
On the map: LLM reasoning → Reasoning for agents, planning and code
also in 1 more
Abstract (arXiv)
Large Reasoning Models (LRMs) have emerged as a powerful advancement in multi-step reasoning tasks, offering enhanced transparency and logical consistency through explicit chains of thought (CoT). However, these models introduce novel safety and reliability risks, such as CoT-hijacking and prompt-induced inefficiencies, which are not fully captured by existing evaluation methods. To address this gap, we propose RT-LRM, a unified benchmark designed to assess the trustworthiness of LRMs. RT-LRM evaluates three core dimensions: truthfulness, safety and efficiency. Beyond metric-based evaluation, we further introduce the training paradigm as a key analytical perspective to investigate the systematic impact of different training strategies on model trustworthiness. We achieve this by designing a curated suite of 30 reasoning tasks from an observational standpoint. We conduct extensive experiments on 26 models and identify several valuable insights into the trustworthiness of LRMs. For example, LRMs generally face trustworthiness challenges and tend to be more fragile than Large Language Models (LLMs) when encountering reasoning-induced risks. These findings uncover previously underexplored vulnerabilities and highlight the need for more targeted evaluations. In addition, we release a scalable toolbox for standardized trustworthiness research to support future advancements in this important field. Our code and datasets will be open-sourced.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 39 of its 64 references that are in the map. First posted on arXiv 29 Nov 2025.
Builds on
39 of 64 references.
Closest ancestors · 19
Same direction, newest first
- 2025BadThink: Triggered Overthinking Attacks on Chain-of-Thought Reasoning in Large Language Models13 Nov
- 2025One Token Embedding Is Enough to Deadlock Your Large Reasoning Model12 Oct
- 2025POT: Inducing Overthinking in LLMs via Black-Box Iterative Optimization23 Aug
- 2025Excessive Reasoning Attack on Reasoning LLMs17 Jun
- 2025Beyond Safe Answers: A Benchmark for Evaluating True Risk Awareness in Large Reasoning Models26 May
- 2025SafeKey: Amplifying Aha-Moment Insights for Safety Reasoning22 May
- 2025How Should We Enhance the Safety of Large Reasoning Models: An Empirical Study21 May
- 2025AutoRAN: Automated Hijacking of Safety Reasoning in Large Reasoning Models16 May
- 2025Safety in Large Reasoning Models: A Survey24 Apr
- 2025SafeMLRM: Demystifying Safety in Multi-modal Large Reasoning Models9 Apr
- 2025Process or Result? Manipulated Ending Tokens Can Mislead Reasoning LLMs to Ignore the Correct Reasoning Steps25 Mar
- 2025Cats Confuse Reasoning LLM: Query Agnostic Adversarial Triggers for Reasoning Models3 Mar
7 more
- 2025Safety Tax: Safety Alignment Makes Your Large Reasoning Models Less Reasonable1 Mar
- 2025H-CoT: Hijacking the Chain-of-Thought Safety Reasoning Mechanism to Jailbreak Large Reasoning Models, Including OpenAI o1/o3, DeepSeek-R1, and Gemini 2.0 Flash Thinking18 Feb
- 2025SafeChain: Safety of Language Models with Long Chain-of-Thought Reasoning Capabilities17 Feb
- 2025Trading Inference-Time Compute for Adversarial Robustness31 Jan
- 2024OpenAI o1 System Card21 Dec
- 2024Deliberative Alignment: Reasoning Enables Safer Language Models20 Dec
- 2024Qwen2.5-Coder Technical Report18 Sep
Other references · 20
- 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
- 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,330
- 2021Program Synthesis with Large Language Modelscited by 3,637
- 2025DAPO: An Open-Source LLM Reinforcement Learning System at Scalecited by 2,810
- 2025LIMO: Less is More for Reasoningcited by 498
- 2023Trustworthy LLMs: a Survey and Guideline for Evaluating Large Language Models' Alignmentcited by 401
- 2022Holistic Evaluation of Language Modelscited by 131
- 2024Attacks, Defenses and Evaluations for LLM Conversation Safety: A Surveycited by 130
- 2025SycEval: Evaluating LLM Sycophancycited by 108
- 2023Evil Geniuses: Delving into the Safety of LLM-based Agentscited by 106
- 2023Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilitiescited by 82
- 2024AI-LieDar: Examine the Trade-off Between Utility and Truthfulness in LLM Agentscited by 31
8 more
- 2025MLA-Trust: Benchmarking Trustworthiness of Multimodal LLM Agents in GUI Environmentscited by 23
- 2024See What LLMs Cannot Answer: A Self-Challenge Framework for Uncovering LLM Weaknessescited by 15
- 2025When Reasoning Meets Compression: Understanding the Effects of LLMs Compression on Large Reasoning Modelscited by 13
- 2024Root Defence Strategies: Ensuring Safety of LLM at the Decoding Levelcited by 11
- 2024Improving Large Language Model (LLM) fidelity through context-aware grounding: A systematic approach to reliability and veracitycited by 8
- 2024TruthEval: A Dataset to Evaluate LLM Truthfulness and Reliabilitycited by 7
- 2025Strong Memory, Weak Control: An Empirical Study of Executive Functioning in LLMscited by 6
- 2024AutoBreach: Universal and Adaptive Jailbreaking with Efficient Wordplay-Guided Optimizationcited by 5
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2025A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Models
- 2025A Survey of Efficient Reasoning for Large Reasoning Models: Language, Multimodality, and Beyond
- 2025SafeRBench: Dissecting the Reasoning Safety of Large Language Models
- 2025ReFIne: A Framework for Trustworthy Large Reasoning Models with Reliability, Faithfulness, and Interpretability
- 2025THINK-Bench: Evaluating Thinking Efficiency and Chain-of-Thought Quality of Large Reasoning Models
- 2025Efficient Inference for Large Reasoning Models: A Survey
- 2026Does Reasoning Preserve Alignment? On the Trustworthiness of Large Reasoning Models
- 2025One Missing Piece for Open-Source Reasoning Models: A Dataset to Mitigate Cold-Starting Short CoT LLMs in RL