mlsanityData to 7 Oct 2026

SAVeS: Steering Safety Judgments in Vision-Language Models via Semantic Cues

arXiv 2603.19092 ↗First posted 19 Mar 2026cs.CV cs.AI cs.CLcited by 4

On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness

Abstract (arXiv)

Vision-language models (VLMs) are increasingly deployed in real-world and embodied settings where safety decisions depend on visual context. However, it remains unclear which visual evidence drives these judgments. We study whether multimodal safety behavior in VLMs can be steered by simple semantic cues. We introduce a semantic steering framework that applies controlled textual, visual, and cognitive interventions without changing the underlying scene content. To evaluate these effects, we propose SAVeS, a benchmark for situational safety under semantic cues, together with an evaluation protocol that separates behavioral refusal, grounded safety reasoning, and false refusals. Experiments across multiple VLMs and an additional state-of-the-art benchmark show that safety decisions are highly sensitive to semantic cues, indicating reliance on learned visual-linguistic associations rather than grounded visual understanding. We further demonstrate that automated steering pipelines can exploit these mechanisms, highlighting a potential vulnerability in multimodal safety systems.

Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 27 of its 28 references that are in the map. First posted on arXiv 19 Mar 2026.

Builds on

27 of 28 references.

Closest ancestors · 7

Same direction, newest first

  1. 2025Visual Contextual Attack: Jailbreaking MLLMs with Image-Driven Context Injection3 Jul
  2. 2025Safe RLHF-V: Safe Reinforcement Learning from Multi-modal Human Feedback22 Mar
  3. 2024VLSBench: Unveiling Visual Leakage in Multimodal Safety29 Nov
  4. 2024IDEATOR: Jailbreaking and Benchmarking Large Vision-Language Models Using Themselves29 Oct
  5. 2024Multimodal Situational Safety8 Oct
  6. 2024Unveiling Typographic Deceptions: Insights of the Typographic Vulnerability in Large Vision-Language Model29 Feb
  7. 2023MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models29 Nov

Other references · 20

  1. 2022Training language models to follow instructions with human feedbackcited by 15,712
  2. 2023Visual Instruction Tuningcited by 7,792
  3. 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,069
  4. 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,175
  5. 2023MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Modelscited by 2,689
  6. 2023PaLM-E: An Embodied Multimodal Language Modelcited by 2,037
  7. 2023Mitigating Object Hallucinations in Large Vision-Language Models through Visual Contrastive Decodingcited by 671
  8. 2023Visual ChatGPT: Talking, Drawing and Editing with Visual Foundation Modelscited by 659
  9. 2023Safe RLHF: Safe Reinforcement Learning from Human Feedbackcited by 630
  10. 2024Hallucination of Multimodal Large Language Models: A Surveycited by 380
  11. 2024SafeAgentBench: A Benchmark for Safe Task Planning of Embodied LLM Agentscited by 102
  12. 2025IS-Bench: Evaluating Interactive Safety of VLM-Driven Embodied Agents in Daily Household Taskscited by 40
8 more
  1. 2025Treble Counterfactual VLMs: A Causal Approach to Hallucinationcited by 33
  2. 2025AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructionscited by 33
  3. 2025Safety Guardrails for LLM-Enabled Robotscited by 30
  4. 2025DASH: Detection and Assessment of Systematic Hallucinations of VLMscited by 14
  5. 2024Don't Let Your Robot be Harmful: Responsible Robotic Manipulation via Safety-as-Policycited by 9
  6. 2025EAGLE: Enhanced Visual Grounding Minimizes Hallucinations in Instructional Multimodal Modelscited by 8
  7. 2025Multimodal Safety Evaluation in Generative Agent Social Simulationscited by 5
  8. 2025Vision Language Models Map Logos to Text via Semantic Entanglement in the Visual Projectorcited by 1

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 4.

4 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026HazardArena: Evaluating Semantic Safety in Vision-Language-Action Models
  2. 2025Self-Aware Safety Augmentation: Leveraging Internal Semantic Understanding to Enhance Safety in Vision-Language Models
  3. 2026From Local Evidence to Safety Verdicts: Causal Tracing in Vision-Language Models
  4. 2025Rethinking Bottlenecks in Safety Fine-Tuning of Vision Language Models
  5. 2025SIA: Enhancing Safety via Intent Awareness for Vision-Language Models
  6. 2025RedDiffuser: Auditing Multimodal Safety Failures in Vision-Language Models via Reinforced Diffusion
  7. 2026Visual Grounding Safety in Vision-Language Models
  8. 2026When Seeing Overrides Knowing: Visual Dominance and Deferral-Based Method for Personalized Safety in VLMs