Unlearning the Unpromptable: Prompt-free Instance Unlearning in Diffusion Models
On the map: Diffusion models → Robustness, privacy and adversarial aspects
also in 1 more
Abstract (arXiv)
Machine unlearning aims to remove specific outputs from trained models, often at the concept level, such as forgetting all occurrences of a particular celebrity or filtering content via text prompts. However, many undesired outputs, such as an individual's face or generations culturally or factually misinterpreted, cannot often be specified by text prompts. We address this underexplored setting of instance unlearning for outputs that are undesired but unpromptable, where the goal is to forget target outputs selectively while preserving the rest. To this end, we introduce an effective surrogate-based unlearning method that leverages image editing, timestep-aware weighting, and gradient surgery to guide trained diffusion models toward forgetting specific outputs. Experiments on conditional (Stable Diffusion 3) and unconditional (DDPM-CelebA) diffusion models demonstrate that our prompt-free method uniquely unlearns unpromptable outputs, such as faces and culturally inaccurate depictions, with preserved integrity, unlike prompt-based and prompt-free baselines. Our proposed method would serve as a practical hotfix for diffusion model providers to ensure privacy protection and ethical compliance.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 63 of its 80 references that are in the map. First posted on arXiv 11 Mar 2026.
Builds on
63 of 80 references.
Closest ancestors · 22
Same direction, newest first
- 2025Concept Pinpoint Eraser for Text-to-image Diffusion Models via Residual Attention Gate28 Jun
- 2025Fine-Grained Erasure in Text-to-Image Diffusion-based Foundation Models25 Mar
- 2025Data Unlearning in Diffusion Models2 Mar
- 2025Concept Corrector: Erase concepts on the fly for text-to-image diffusion models22 Feb
- 2025Fantastic Targets for Concept Erasure in Diffusion Models and Where To Find Them31 Jan
- 2024Erasing Undesirable Concepts in Diffusion Models with Adversarial Preservation21 Oct
- 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation16 Oct
- 2024Growth Inhibitors for Suppressing Inappropriate Image Concepts in Diffusion Models2 Aug
- 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models17 Jul
- 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May
- 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
- 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applications26 Dec
10 more
- 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Erasers29 Nov
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
- 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct
- 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
- 2023Unified Concept Editing in Diffusion Models25 Aug
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
- 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
- 2023Erasing Concepts from Diffusion Models13 Mar
- 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
- 2022Red-Teaming the Stable Diffusion Safety Filter3 Oct
Other references · 41
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2020Denoising Diffusion Implicit Modelscited by 9,655
- 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2022Scalable Diffusion Models with Transformerscited by 5,931
- 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,466
- 2016Overcoming catastrophic forgetting in neural networkscited by 4,718
- 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,094
- 2014Deep Learning Face Attributes in the Wildcited by 3,679
- 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,595
29 more
- 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,967
- 2025Wan: Open and Advanced Large-Scale Video Generative Modelscited by 2,536
- 2023Stable Video Diffusion: Scaling Latent Video Diffusion Models to Large Datasetscited by 2,526
- 2021SDEdit: Guided Image Synthesis and Editing with Stochastic Differential Equationscited by 1,903
- 2023AnimateDiff: Animate Your Personalized Text-to-Image Diffusion Models without Specific Tuningcited by 1,418
- 2020Gradient Surgery for Multi-Task Learningcited by 1,210
- 2018Experience Replay for Continual Learningcited by 1,074
- 2022CogVideo: Large-scale Pretraining for Text-to-Video Generation via Transformerscited by 973
- 2023Muse: Text-To-Image Generation via Masked Generative Transformerscited by 640
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2024VideoCrafter2: Overcoming Data Limitations for High-Quality Video Diffusion Modelscited by 568
- 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 418
- 2023DeepCache: Accelerating Diffusion Models for Freecited by 346
- 2023Understanding and Mitigating Copying in Diffusion Modelscited by 205
- 2022A Self-Supervised Descriptor for Image Copy Detectioncited by 175
- 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 175
- 2022Zero-Shot Machine Unlearningcited by 125
- 2024Detecting, Explaining, and Mitigating Memorization in Diffusion Modelscited by 94
- 2023Circumventing Concept Erasure Methods For Text-to-Image Generative Modelscited by 81
- 2023Recon: Reducing Conflicting Gradients from the Root for Multi-Task Learningcited by 50
- 2024Direct Unlearning Optimization for Robust and Safe Text-to-Image Modelscited by 50
- 2024Unlearning as multi-task optimization: A normalized gradient difference approach with an adaptive learning ratecited by 29
- 2024Generative Unlearning for Any Identitycited by 19
- 2024Learning to Unlearn for Robust Machine Unlearningcited by 19
- 2025Learning to Unlearn while Retaining: Combating Gradient Conflicts in Machine Unlearningcited by 19
- 2024Diffusion Tuning: Transferring Diffusion Models via Chain of Forgettingcited by 12
- 2025Go Beyond Your Means: Unlearning with Per-Sample Gradient Orthogonalizationcited by 7
- 2024Privacy-Preserving Federated Unlearning with Certified Client Removalcited by 5
- 2022Taming Normalizing Flowscited by 3
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2026SPARE: Self-distillation for PARameter-Efficient Removal
- 2024Unlearning or Concealment? A Critical Analysis and Evaluation Metrics for Unlearning in Diffusion Models
- 2025Continual Unlearning for Text-to-Image Diffusion Models: A Regularization Perspective
- 2026eval-unlearn: Benchmarking unlearning in Text-to-Image Diffusion Models
- 2026Weeding Out Bad Seeds: Initial-Noise-Robust Unlearning for Text-to-Image Diffusion Models
- 2024Unlearning Concepts in Diffusion Model via Concept Domain Correction and Concept Preserving Gradient
- 2024Holistic Unlearning Benchmark: A Multi-Faceted Evaluation for Text-to-Image Diffusion Model Unlearning
- 2026Compensation-free Machine Unlearning in Text-to-Image Diffusion Models by Eliminating the Mutual Information