mlsanityData to 7 Oct 2026

When Safety Collides: Resolving Multi-Category Harmful Conflicts in Text-to-Image Diffusion via Adaptive Safety Guidance

arXiv 2602.20880 ↗First posted 24 Feb 2026cs.CVcited by 9

On the map: Diffusion models → Robustness, privacy and adversarial aspects

also in 1 more
Abstract (arXiv)

Text-to-Image (T2I) diffusion models have demonstrated significant advancements in generating high-quality images, while raising potential safety concerns regarding harmful content generation. Safety-guidance-based methods have been proposed to mitigate harmful outputs by steering generation away from harmful zones, where the zones are averaged across multiple harmful categories based on predefined keywords. However, these approaches fail to capture the complex interplay among different harm categories, leading to "harmful conflicts" where mitigating one type of harm may inadvertently amplify another, thus increasing overall harmful rate. To address this issue, we propose Conflict-aware Adaptive Safety Guidance (CASG), a training-free framework that dynamically identifies and applies the category-aligned safety direction during generation. CASG is composed of two components: (i) Conflict-aware Category Identification (CaCI), which identifies the harmful category most aligned with the model's evolving generative state, and (ii) Conflict-resolving Guidance Application (CrGA), which applies safety steering solely along the identified category to avoid multi-category interference. CASG can be applied to both latent-space and text-space safeguards. Experiments on T2I safety benchmarks demonstrate CASG's state-of-the-art performance, reducing the harmful rate by up to 15.4% compared to existing methods.

Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 44 of its 57 references that are in the map. First posted on arXiv 24 Feb 2026.

Builds on

44 of 57 references.

Closest ancestors · 12

Same direction, newest first

  1. 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation16 Oct
  2. 2024Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey6 Aug
  3. 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models17 Jul
  4. 2023MMA-Diffusion: MultiModal Attack on Diffusion Models29 Nov
  5. 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct
  6. 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
  7. 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Prompts12 Sep
  8. 2023Unified Concept Editing in Diffusion Models25 Aug
  9. 2023Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Models23 May
  10. 2023Erasing Concepts from Diffusion Models13 Mar
  11. 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
  12. 2022Red-Teaming the Stable Diffusion Safety Filter3 Oct

Other references · 32

  1. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  2. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  3. 2023GPT-4 Technical Reportcited by 18,132
  4. 2014Microsoft COCO: Common Objects in Contextcited by 17,498
  5. 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
  6. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
  7. 2022Classifier-Free Diffusion Guidancecited by 5,717
  8. 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
  9. 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,094
  10. 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,388
  11. 2019Machine Unlearningcited by 1,020
  12. 2021Multimodal datasets: misogyny, pornography, and malignant stereotypescited by 326
20 more
  1. 2024Hunyuan-DiT: A Powerful Multi-Resolution Diffusion Transformer with Fine-Grained Chinese Understandingcited by 294
  2. 2020Large image datasets: A pyrrhic win for computer vision?cited by 237
  3. 2017GANs Trained by a Two Time-Scale Update Rule Converge to a Local Nash Equilibriumcited by 208
  4. 2022Can Machines Help Us Answering Question 16 in Datasheets, and In Turn Reflecting on Inappropriate Content?cited by 150
  5. 2025Qwen3Guard Technical Reportcited by 125
  6. 2024T2VSafetyBench: Evaluating the Safety of Text-to-Video Generative Modelscited by 66
  7. 2024Dynamic Negative Guidance of Diffusion Modelscited by 28
  8. 2023Machine Vision Therapy: Multimodal Large Language Models Can Enhance Visual Robustness via Denoising In-Context Learningcited by 27
  9. 2024Automatic Jailbreaking of the Text-to-Image Generative AI Systemscited by 22
  10. 2024LaVin-DiT: Large Vision Diffusion Transformercited by 21
  11. 2023Using Text-to-Image Generation for Architectural Design Ideationcited by 16
  12. 2024Near to Mid-term Risks and Opportunities of Open-Source Generative AIcited by 13
  13. 2025Beyond Optimal Transport: Model-Aligned Coupling for Flow Matchingcited by 13
  14. 2025FORCE: Transferable Visual Jailbreaking Attacks via Feature Over-Reliance CorrEctioncited by 11
  15. 2025MMGen: Unified Multi-modal Image Generation and Understanding in One Gocited by 10
  16. 2024TED-VITON: Transformer-Empowered Diffusion Models for Virtual Try-Oncited by 8
  17. 2025Jailbreaking the Non-Transferable Barrier via Test-Time Data Disguisingcited by 8
  18. 2025DAMR: Efficient and Adaptive Context-Aware Knowledge Graph Question Answering with LLM-Guided MCTScited by 6
  19. 2024Discriminative Image Generation with Diffusion Models for Zero-Shot Learningcited by 5
  20. 2026Is Gradient Ascent Really Necessary? Memorize to Forget for Machine Unlearningcited by 5

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 9.

9 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025Detect-and-Guide: Self-regulation of Diffusion Models for Safe Text-to-Image Generation via Guideline Token Optimization
  2. 2026SafeCtrl: Region-Aware Safety Control for Text-to-Image Diffusion via Detect-Then-Suppress
  3. 2024SafeCFG: Controlling Harmful Features with Dynamic Safe Guidance for Safe Generation
  4. 2024Safety Alignment Backfires: Preventing the Re-emergence of Suppressed Concepts in Fine-tuned Text-to-Image Diffusion Models
  5. 2025SPQR: A Multi-Dimensional Benchmark for Safety Alignment under Benign Model Adaptation
  6. 2025Personalized Safety Alignment for Text-to-Image Diffusion Models
  7. 2025SafeCtrl: Region-Based Safety Control for Text-to-Image Diffusion via Detect-Then-Suppress
  8. 2025T2ISafety: Benchmark for Assessing Fairness, Toxicity, and Privacy in Image Generation