mlsanityData to 7 Oct 2026

Unlearning the Unpromptable: Prompt-free Instance Unlearning in Diffusion Models

arXiv 2603.10445 ↗First posted 11 Mar 2026cs.LG cs.CVcited by 1

On the map: Diffusion models → Robustness, privacy and adversarial aspects

also in 1 more
Abstract (arXiv)

Machine unlearning aims to remove specific outputs from trained models, often at the concept level, such as forgetting all occurrences of a particular celebrity or filtering content via text prompts. However, many undesired outputs, such as an individual's face or generations culturally or factually misinterpreted, cannot often be specified by text prompts. We address this underexplored setting of instance unlearning for outputs that are undesired but unpromptable, where the goal is to forget target outputs selectively while preserving the rest. To this end, we introduce an effective surrogate-based unlearning method that leverages image editing, timestep-aware weighting, and gradient surgery to guide trained diffusion models toward forgetting specific outputs. Experiments on conditional (Stable Diffusion 3) and unconditional (DDPM-CelebA) diffusion models demonstrate that our prompt-free method uniquely unlearns unpromptable outputs, such as faces and culturally inaccurate depictions, with preserved integrity, unlike prompt-based and prompt-free baselines. Our proposed method would serve as a practical hotfix for diffusion model providers to ensure privacy protection and ethical compliance.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 63 of its 80 references that are in the map. First posted on arXiv 11 Mar 2026.

Builds on

63 of 80 references.

Closest ancestors · 22

Same direction, newest first

  1. 2025Concept Pinpoint Eraser for Text-to-image Diffusion Models via Residual Attention Gate28 Jun
  2. 2025Fine-Grained Erasure in Text-to-Image Diffusion-based Foundation Models25 Mar
  3. 2025Data Unlearning in Diffusion Models2 Mar
  4. 2025Concept Corrector: Erase concepts on the fly for text-to-image diffusion models22 Feb
  5. 2025Fantastic Targets for Concept Erasure in Diffusion Models and Where To Find Them31 Jan
  6. 2024Erasing Undesirable Concepts in Diffusion Models with Adversarial Preservation21 Oct
  7. 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation16 Oct
  8. 2024Growth Inhibitors for Suppressing Inappropriate Image Concepts in Diffusion Models2 Aug
  9. 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models17 Jul
  10. 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May
  11. 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
  12. 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applications26 Dec
10 more
  1. 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Erasers29 Nov
  2. 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
  3. 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct
  4. 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
  5. 2023Unified Concept Editing in Diffusion Models25 Aug
  6. 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
  7. 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
  8. 2023Erasing Concepts from Diffusion Models13 Mar
  9. 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov
  10. 2022Red-Teaming the Stable Diffusion Safety Filter3 Oct

Other references · 41

  1. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  2. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
  3. 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
  4. 2020Denoising Diffusion Implicit Modelscited by 9,655
  5. 2015Deep Unsupervised Learning using Nonequilibrium Thermodynamicscited by 7,005
  6. 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
  7. 2022Scalable Diffusion Models with Transformerscited by 5,931
  8. 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,466
  9. 2016Overcoming catastrophic forgetting in neural networkscited by 4,718
  10. 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,094
  11. 2014Deep Learning Face Attributes in the Wildcited by 3,679
  12. 2021GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Modelscited by 3,595
29 more
  1. 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,967
  2. 2025Wan: Open and Advanced Large-Scale Video Generative Modelscited by 2,536
  3. 2023Stable Video Diffusion: Scaling Latent Video Diffusion Models to Large Datasetscited by 2,526
  4. 2021SDEdit: Guided Image Synthesis and Editing with Stochastic Differential Equationscited by 1,903
  5. 2023AnimateDiff: Animate Your Personalized Text-to-Image Diffusion Models without Specific Tuningcited by 1,418
  6. 2020Gradient Surgery for Multi-Task Learningcited by 1,210
  7. 2018Experience Replay for Continual Learningcited by 1,074
  8. 2022CogVideo: Large-scale Pretraining for Text-to-Video Generation via Transformerscited by 973
  9. 2023Muse: Text-To-Image Generation via Masked Generative Transformerscited by 640
  10. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
  11. 2024VideoCrafter2: Overcoming Data Limitations for High-Quality Video Diffusion Modelscited by 568
  12. 2022Diffusion Art or Digital Forgery? Investigating Data Replication in Diffusion Modelscited by 418
  13. 2023DeepCache: Accelerating Diffusion Models for Freecited by 346
  14. 2023Understanding and Mitigating Copying in Diffusion Modelscited by 205
  15. 2022A Self-Supervised Descriptor for Image Copy Detectioncited by 175
  16. 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 175
  17. 2022Zero-Shot Machine Unlearningcited by 125
  18. 2024Detecting, Explaining, and Mitigating Memorization in Diffusion Modelscited by 94
  19. 2023Circumventing Concept Erasure Methods For Text-to-Image Generative Modelscited by 81
  20. 2023Recon: Reducing Conflicting Gradients from the Root for Multi-Task Learningcited by 50
  21. 2024Direct Unlearning Optimization for Robust and Safe Text-to-Image Modelscited by 50
  22. 2024Unlearning as multi-task optimization: A normalized gradient difference approach with an adaptive learning ratecited by 29
  23. 2024Generative Unlearning for Any Identitycited by 19
  24. 2024Learning to Unlearn for Robust Machine Unlearningcited by 19
  25. 2025Learning to Unlearn while Retaining: Combating Gradient Conflicts in Machine Unlearningcited by 19
  26. 2024Diffusion Tuning: Transferring Diffusion Models via Chain of Forgettingcited by 12
  27. 2025Go Beyond Your Means: Unlearning with Per-Sample Gradient Orthogonalizationcited by 7
  28. 2024Privacy-Preserving Federated Unlearning with Certified Client Removalcited by 5
  29. 2022Taming Normalizing Flowscited by 3

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2026SPARE: Self-distillation for PARameter-Efficient Removal
  2. 2024Unlearning or Concealment? A Critical Analysis and Evaluation Metrics for Unlearning in Diffusion Models
  3. 2025Continual Unlearning for Text-to-Image Diffusion Models: A Regularization Perspective
  4. 2026eval-unlearn: Benchmarking unlearning in Text-to-Image Diffusion Models
  5. 2026Weeding Out Bad Seeds: Initial-Noise-Robust Unlearning for Text-to-Image Diffusion Models
  6. 2024Unlearning Concepts in Diffusion Model via Concept Domain Correction and Concept Preserving Gradient
  7. 2024Holistic Unlearning Benchmark: A Multi-Faceted Evaluation for Text-to-Image Diffusion Model Unlearning
  8. 2026Compensation-free Machine Unlearning in Text-to-Image Diffusion Models by Eliminating the Mutual Information