mlsanityData to 7 Oct 2026

SALMUBench: A Benchmark for Sensitive Association-Level Multimodal Unlearning

arXiv 2603.26316 ↗First posted 27 Mar 2026cs.CV cs.LGcited by 3

On the map: LLM safety and security → Machine unlearning

Abstract (arXiv)

As multimodal models like CLIP become integral to downstream systems, the need to remove sensitive information is critical. However, machine unlearning for contrastively-trained encoders remains underexplored, and existing evaluations fail to diagnose fine-grained, association-level forgetting. We introduce SALMUBench (Sensitive Association-Level Multimodal Unlearning), a benchmark built upon a synthetic dataset of 60K persona-attribute associations and two foundational models: a Compromised model polluted with this data, and a Clean model without it. To isolate unlearning effects, both are trained from scratch on the same 400M-pair retain base, with the Compromised model additionally trained on the sensitive set. We propose a novel evaluation protocol with structured holdout sets (holdout identity, holdout association) to precisely measure unlearning efficacy and collateral damage. Our benchmark reveals that while utility-efficient deletion is feasible, current methods exhibit distinct failure modes: they either fail to forget effectively or over-generalize by erasing more than intended. SALMUBench sets a new standard for comprehensive unlearning evaluation, and we publicly release our dataset, models, evaluation scripts, and leaderboards to foster future research.

Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 21 of its 29 references that are in the map. First posted on arXiv 27 Mar 2026.

Builds on

21 of 29 references.

Closest ancestors · 9

Same direction, newest first

  1. 2025Decoupled Distillation to Erase: A General Unlearning Method for Any Class-centric Tasks31 Mar
  2. 2024Benchmarking Vision Language Model Unlearning via Fictitious Facial Identity Dataset5 Nov
  3. 2024CLIPErase: Efficient Unlearning of Visual-Textual Associations in CLIP30 Oct
  4. 2024Protecting Privacy in Multimodal Large Language Models with MLLMU-Bench29 Oct
  5. 2024Zero-Shot Class Unlearning in CLIP with Synthetic Samples10 Jul
  6. 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
  7. 2023MultiDelete for Multimodal Machine Unlearning18 Nov
  8. 2023Boundary Unlearning21 Mar
  9. 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct

Other references · 12

  1. 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,466
  2. 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,310
  3. 2023IP-Adapter: Text Compatible Image Prompt Adapter for Text-to-Image Diffusion Modelscited by 1,439
  4. 2019Machine Unlearningcited by 1,020
  5. 2022Quantifying Memorization Across Neural Language Modelscited by 755
  6. 2023DataComp: In search of the next generation of multimodal datasetscited by 635
  7. 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
  8. 2019Certified Data Removal from Machine Learning Modelscited by 512
  9. 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
  10. 2023Data Filtering Networkscited by 247
  11. 2022Does CLIP Know My Face?cited by 19
  12. 2015Pantheon 1.0, a manually verified dataset of globally famous biographiescited by 8

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 3.

3 papers.