Relationship-Aware Safety Unlearning for Multimodal LLMs
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
also in 1 more
Abstract (arXiv)
Generative multimodal models can exhibit safety failures that are inherently relational: two benign concepts can become unsafe when linked by a specific action or relation (e.g., child-drinking-wine). Existing unlearning and concept-erasure approaches often target isolated concepts or image-text pairs, which can cause collateral damage to benign uses of the same objects and relations. We propose relationship-aware safety unlearning: a framework that explicitly represents unsafe object-relation-object (O-R-O) tuples and applies targeted parameter-efficient edits (LoRA) to suppress unsafe tuples while preserving object marginals and safe neighboring relations. We include CLIP-based experiments and robustness evaluation under paraphrase, contextual, and out-of-distribution image attacks.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 24 of its 30 references that are in the map. First posted on arXiv 15 Mar 2026.
Builds on
24 of 30 references.
Closest ancestors · 1
Same direction, newest first
Other references · 23
- 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
- 2023Erasing Concepts from Diffusion Modelscited by 539
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearningcited by 504
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Modelscited by 437
- 2022A Survey of Machine Unlearningcited by 312
- 2023Large Language Model Unlearningcited by 302
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Modelscited by 261
- 2024Simplicity Prevails: Rethinking Negative Preference Optimization for LLM Unlearningcited by 172
- 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applicationscited by 169
- 2021Machine Unlearning via Algorithmic Stabilitycited by 130
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearningcited by 104
- 2024Direct Unlearning Optimization for Robust and Safe Text-to-Image Modelscited by 50
11 more
- 2024Dissecting Language Models: Machine Unlearning via Selective Pruningcited by 42
- 2024Digital Forgetting in Large Language Models: A Survey of Unlearning Methodscited by 40
- 2024A Review on Machine Unlearningcited by 32
- 2024Separable Multi-Concept Erasure from Diffusion Modelscited by 28
- 2025Fine-Grained Erasure in Text-to-Image Diffusion-based Foundation Modelscited by 25
- 2023MultiDelete for Multimodal Machine Unlearningcited by 20
- 2024CLIPErase: Efficient Unlearning of Visual-Textual Associations in CLIPcited by 19
- 2023Machine Unlearning in Learned Databases: An Experimental Analysiscited by 18
- 2024A Survey on Machine Unlearning: Techniques and New Emerged Privacy Riskscited by 15
- 2025SoK: Machine Unlearning for Large Language Modelscited by 11
- 2025Erasing Concepts, Steering Generations: A Comprehensive Survey of Concept Suppressioncited by 10
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2025Safety Mirage: How Spurious Correlations Undermine VLM Safety Fine-Tuning and Can Be Mitigated by Machine Unlearning
- 2025Unlearning Sensitive Information in Multimodal LLMs: Benchmark and Attack-Defense Evaluation
- 2026UnifiedAttack: Evaluating the Safety of Large Multimodal Models in Synergistic Harmful Image-Text Generation
- 2026ShieldCLIP: Selective Safety Alignment for Harmful Content Mitigation in Multimodal Foundation Models
- 2025SafeEraser: Enhancing Safety in Multimodal Large Language Models through Multimodal Machine Unlearning
- 2025SAGE: Exploring the Boundaries of Unsafe Concept Domain with Semantic-Augment Erasing
- 2025VLSU: Mapping the Limits of Joint Multimodal Understanding for AI Safety
- 2026Consistency-Preserving Concept Erasure via Unsafe-Safe Pairing and Directional Fisher-weighted Adaptation