ProbeLLM: Automating Principled Diagnosis of LLM Failures
Not on the map. Why?
Abstract (arXiv)
Understanding how and why large language models (LLMs) fail is becoming a central challenge as models rapidly evolve and static evaluations fall behind. While automated probing has been enabled by dynamic test generation, existing approaches often discover isolated failure cases, lack principled control over exploration, and provide limited insight into the underlying structure of model weaknesses. We propose ProbeLLM, a benchmark-agnostic automated probing framework that elevates weakness discovery from individual failures to structured failure modes. ProbeLLM formulates probing as a hierarchical Monte Carlo Tree Search, explicitly allocating limited probing budgets between global exploration of new failure regions and local refinement of recurring error patterns. By restricting probing to verifiable test cases and leveraging tool-augmented generation and verification, ProbeLLM grounds failure discovery in reliable evidence. Discovered failures are further consolidated into interpretable failure modes via failure-aware embeddings and boundary-aware induction. Across diverse benchmarks and LLMs, ProbeLLM reveals substantially broader, cleaner, and more fine-grained failure landscapes than static benchmarks and prior automated methods, supporting a shift from case-centric evaluation toward principled weakness discovery.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 72 of its 94 references that are in the map. First posted on arXiv 13 Feb 2026.
Builds on
72 of 94 references.
References · 72
- 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 8,851
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2019HellaSwag: Can a Machine Really Finish Your Sentence?cited by 4,018
- 2021Program Synthesis with Large Language Modelscited by 3,509
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,919
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 2,914
- 2019SuperGLUE: A Stickier Benchmark for General-Purpose Language Understanding Systemscited by 1,718
- 2023A Survey on Hallucination in Large Language Models: Principles, Taxonomy, Challenges, and Open Questionscited by 1,582
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,326
- 2023A Survey on Evaluation of Large Language Modelscited by 1,227
38 more
- 2022Red Teaming Language Models with Language Modelscited by 983
- 2020Beyond Accuracy: Behavioral Testing of NLP models with CheckListcited by 979
- 2023Large Language Modelscited by 774
- 2025DeepSeek-V3.2: Pushing the Frontier of Open Large Language Modelscited by 755
- 2023AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Modelscited by 738
- 2024Phi-4 Technical Reportcited by 675
- 2023The Reversal Curse: LLMs trained on "A is B" fail to learn "B is A"cited by 399
- 2024Justice or Prejudice? Quantifying Biases in LLM-as-a-Judgecited by 354
- 2024ReST-MCTS*: LLM Self-Training via Process Reward Guided Tree Searchcited by 338
- 2023Alphazero-like Tree-Search can Guide Large Language Model Decoding and Trainingcited by 291
- 2024Agent-SafetyBench: Evaluating the Safety of LLM Agentscited by 280
- 2020Social Chemistry 101: Learning to Reason about Social and Moral Normscited by 253
- 2024LiveBench: A Challenging, Contamination-Limited LLM Benchmarkcited by 242
- 2024Monte Carlo Tree Search Boosts Reasoning via Iterative Preference Learningcited by 238
- 2024Jailbreak Attacks and Defenses Against Large Language Models: A Surveycited by 215
- 2023Evaluating the Moral Beliefs Encoded in LLMscited by 211
- 2024DeepSeek-Prover-V1.5: Harnessing Proof Assistant Feedback for Reinforcement Learning and Monte-Carlo Tree Searchcited by 189
- 2023MasterKey: Automated Jailbreak Across Multiple Large Language Model Chatbotscited by 172
- 2023MART: Improving LLM Safety with Multi-round Automatic Red-Teamingcited by 161
- 2024Accessing GPT-4 level Mathematical Olympiad Solutions via Monte Carlo Tree Self-refine with LLaMa-3 8Bcited by 156
- 2024Tree Search for Language Model Agentscited by 148
- 2024AdvPrompter: Fast Adaptive Adversarial Prompting for LLMscited by 146
- 2023ProPILE: Probing Privacy Leakage in Large Language Modelscited by 127
- 2025X-Teaming: Multi-Turn Jailbreaks and Defenses with Adaptive Multi-Agentscited by 112
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deploymentcited by 110
- 2023DyVal: Dynamic Evaluation of Large Language Models for Reasoning Taskscited by 100
- 2024Bias and Unfairness in Information Retrieval Systems: New Challenges in the LLM Eracited by 97
- 2025Self-Adapting Language Modelscited by 71
- 2021The Spotlight: A General Method for Discovering Systematic Errors in Deep Learning Modelscited by 63
- 2023Latent Jailbreak: A Benchmark for Evaluating Text Safety and Output Robustness of Large Language Modelscited by 56
- 2024Dynamic Evaluation of Large Language Models by Meta Probing Agentscited by 54
- 2024AutoBencher: Towards Declarative Benchmark Constructioncited by 40
- 2024RedAgent: Red Teaming Large Language Models with Context-aware Autonomous Language Agentcited by 39
- 2025On the Trustworthiness of Generative Foundation Models: Guideline, Assessment, and Perspectivecited by 39
- 2025Chasing Moving Targets with Online Self-Play Reinforcement Learning for Safer Language Modelscited by 33
- 2025A Survey on Large Language Model Benchmarkscited by 32
- 2024Navigating LLM Ethics: Advancements, Challenges, and Future Directionscited by 28
- 2025Building a Foundational Guardrail for General Agentic Systems via Synthetic Datacited by 26
50 most cited of 72 All 72 (JSON)
Built on by
Citing papers per year: 2026: 7.
7 papers.
- 2026Causal methods for LLM development and evaluationcited by 2
- 2026Guardian-as-an-Advisor: Advancing Next-Generation Guardian Models for Trustworthy LLMscited by 1
- 2026Chain of Risk: Safety Failures in Large Reasoning Models and Mitigation via Adaptive Multi-Principle Steeringcited by 1
- 2026FailureScope: Cross-Regime Behavioral Diagnosis of Language Model Weaknessescited by 0
- 2026DeepBias: Adaptive In-depth Probing of Social Biases in LVLMscited by 0
- 2026MLIP Detective: Active Failure Mode Discovery Beyond Benchmark Scores for Machine-Learning Interatomic Potentialscited by 0
- 2026GTA: Graph Theory Agent and Benchmark for Algorithmic Graph Reasoning with LLMscited by 0
- 2026GTA: Graph Theory Agent and Benchmark for Algorithmic Graph Reasoning with LLMs10 Sep 2026
- 2026MLIP Detective: Active Failure Mode Discovery Beyond Benchmark Scores for Machine-Learning Interatomic Potentials8 Sep 2026
- 2026DeepBias: Adaptive In-depth Probing of Social Biases in LVLMs13 Jul 2026
- 2026FailureScope: Cross-Regime Behavioral Diagnosis of Language Model Weaknesses3 Jun 2026
- 2026Causal methods for LLM development and evaluation25 May 2026
- 2026Chain of Risk: Safety Failures in Large Reasoning Models and Mitigation via Adaptive Multi-Principle Steering7 May 2026
- 2026Guardian-as-an-Advisor: Advancing Next-Generation Guardian Models for Trustworthy LLMs8 Apr 2026