SALMUBench: A Benchmark for Sensitive Association-Level Multimodal Unlearning
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
As multimodal models like CLIP become integral to downstream systems, the need to remove sensitive information is critical. However, machine unlearning for contrastively-trained encoders remains underexplored, and existing evaluations fail to diagnose fine-grained, association-level forgetting. We introduce SALMUBench (Sensitive Association-Level Multimodal Unlearning), a benchmark built upon a synthetic dataset of 60K persona-attribute associations and two foundational models: a Compromised model polluted with this data, and a Clean model without it. To isolate unlearning effects, both are trained from scratch on the same 400M-pair retain base, with the Compromised model additionally trained on the sensitive set. We propose a novel evaluation protocol with structured holdout sets (holdout identity, holdout association) to precisely measure unlearning efficacy and collateral damage. Our benchmark reveals that while utility-efficient deletion is feasible, current methods exhibit distinct failure modes: they either fail to forget effectively or over-generalize by erasing more than intended. SALMUBench sets a new standard for comprehensive unlearning evaluation, and we publicly release our dataset, models, evaluation scripts, and leaderboards to foster future research.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 21 of its 29 references that are in the map. First posted on arXiv 27 Mar 2026.
Builds on
21 of 29 references.
Closest ancestors · 9
Same direction, newest first
- 2025Decoupled Distillation to Erase: A General Unlearning Method for Any Class-centric Tasks31 Mar
- 2024Benchmarking Vision Language Model Unlearning via Fictitious Facial Identity Dataset5 Nov
- 2024CLIPErase: Efficient Unlearning of Visual-Textual Associations in CLIP30 Oct
- 2024Protecting Privacy in Multimodal Large Language Models with MLLMU-Bench29 Oct
- 2024Zero-Shot Class Unlearning in CLIP with Synthetic Samples10 Jul
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023MultiDelete for Multimodal Machine Unlearning18 Nov
- 2023Boundary Unlearning21 Mar
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
Other references · 12
- 2023Adding Conditional Control to Text-to-Image Diffusion Modelscited by 5,466
- 2022BLIP: Bootstrapping Language-Image Pre-training for Unified Vision-Language Understanding and Generationcited by 4,310
- 2023IP-Adapter: Text Compatible Image Prompt Adapter for Text-to-Image Diffusion Modelscited by 1,439
- 2019Machine Unlearningcited by 1,020
- 2022Quantifying Memorization Across Neural Language Modelscited by 755
- 2023DataComp: In search of the next generation of multimodal datasetscited by 635
- 2019Eternal Sunshine of the Spotless Net: Selective Forgetting in Deep Networkscited by 599
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
- 2023Data Filtering Networkscited by 247
- 2022Does CLIP Know My Face?cited by 19
- 2015Pantheon 1.0, a manually verified dataset of globally famous biographiescited by 8
Built on by
Citing papers per year: 2026: 3.
3 papers.
- 2026MemLeak: Diagnosing Information Leaks in Multimodal Agent Memorycited by 1
- 2026Does Forgetting Transfer Across Modalities? A Real-World Benchmark for Cross-Modal Knowledge Unlearning Evaluationcited by 1
- 2026Toward Fine-Grained Forgetting:Attribute Unlearning for Multimodal Large Language Modelscited by 0
- 2026Does Forgetting Transfer Across Modalities? A Real-World Benchmark for Cross-Modal Knowledge Unlearning Evaluation4 Aug 2026
- 2026Toward Fine-Grained Forgetting:Attribute Unlearning for Multimodal Large Language Models2 Aug 2026
- 2026MemLeak: Diagnosing Information Leaks in Multimodal Agent Memory29 Jun 2026