mlsanityData to 14 Oct 2026

Concept Unlearning via Cross-Attention Activation Projection for Diffusion Models

arXiv 2605.25765 ↗First posted 25 May 2026cs.CV cs.AI cs.LGcited by 0

On the map: Diffusion models → Robustness, privacy and adversarial aspects

also in 1 more
Abstract (arXiv)

Existing closed-form methods for concept unlearning in text-to-image diffusion models typically derive editing directions from fixed text embeddings, which may not fully capture how concepts are expressed across latent states, timesteps, and layers. To capture this variation, we investigate cross-attention activations collected during denoising. In controlled probing experiments using the same anchor prompts, activation-derived bases achieve approximately five times the recall of text-derived bases on held-out prompts expressing the target concepts. Based on this finding, we propose Cross-Attention Subspace Erasure (CASE), a closed-form method that constructs layer-specific forget and retain subspaces from cross-attention activations. These subspaces define a retain-constrained linear operator incorporated directly into cross-attention weights, requiring no gradient-based fine-tuning or additional inference-time computation. Across ten concepts spanning four categories, CASE achieves the highest harmonic-mean score among evaluated baselines in all four categories, balancing suppression, retention, adversarial robustness, and generation quality. Further experiments demonstrate robustness to recovery attacks and a favorable suppression-retention trade-off when jointly unlearning up to 100 artistic styles. The benefits of activation-derived editing also extend to larger diffusion models, including SDXL and FLUX.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 37 of its 41 references that are in the map. First posted on arXiv 25 May 2026.

Builds on

37 of 41 references.

Closest ancestors · 26

Same direction, newest first

  1. 2025When Are Concepts Erased From Diffusion Models?22 May
  2. 2025CURE: Concept Unlearning via Orthogonal Representation Editing in Diffusion Models19 May
  3. 2025CASteer: Cross-Attention Steering for Controllable Concept Erasure11 Mar
  4. 2025ACE: Concept Editing in Diffusion Models without Performance Degradation11 Mar
  5. 2024TraSCE: Trajectory Steering for Concept Erasure10 Dec
  6. 2024Precise, Fast, and Low-cost Concept Erasure in Value Space: Orthogonal Complement Matters9 Dec
  7. 2024Erasing Undesirable Concepts in Diffusion Models with Adversarial Preservation21 Oct
  8. 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation16 Oct
  9. 2024Holistic Unlearning Benchmark: A Multi-Faceted Evaluation for Text-to-Image Diffusion Model Unlearning8 Oct
  10. 2024STEREO: A Two-Stage Framework for Adversarially Robust Concept Erasing from Text-to-Image Diffusion Models29 Aug
  11. 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models17 Jul
  12. 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May
14 more
  1. 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
  2. 2024UnlearnCanvas: Stylized Image Dataset for Enhanced Machine Unlearning Evaluation in Diffusion Models19 Feb
  3. 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applications26 Dec
  4. 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Erasers29 Nov
  5. 2023MMA-Diffusion: MultiModal Attack on Diffusion Models29 Nov
  6. 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
  7. 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct
  8. 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
  9. 2023Prompting4Debugging: Red-Teaming Text-to-Image Diffusion Models by Finding Problematic Prompts12 Sep
  10. 2023Unified Concept Editing in Diffusion Models25 Aug
  11. 2023Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Models23 May
  12. 2023Ablating Concepts in Text-to-Image Diffusion Models23 Mar
  13. 2023Erasing Concepts from Diffusion Models13 Mar
  14. 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov

Other references · 11

  1. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  2. 2014Microsoft COCO: Common Objects in Contextcited by 17,608
  3. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,585
  4. 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,355
  5. 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,356
  6. 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
  7. 2023Selective Amnesia: A Continual Learning Approach to Forgetting in Deep Generative Modelscited by 177
  8. 2022Can Machines Help Us Answering Question 16 in Datasheets, and In Turn Reflecting on Inappropriate Content?cited by 155
  9. 2023Editing Implicit Assumptions in Text-to-Image Diffusion Modelscited by 130
  10. 2023Circumventing Concept Erasure Methods For Text-to-Image Generative Modelscited by 85
  11. 2024Get What You Want, Not What You Don't: Image Content Suppression for Text-to-Image Diffusion Modelscited by 63

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026Projected Gradient Unlearning for Text-to-Image Diffusion Models: Defending Against Concept Revival Attacks
  2. 2026Why Instruction-Based Unlearning Fails in Diffusion Models?
  3. 2026A Concept is More Than a Word: Diversified Unlearning in Text-to-Image Diffusion Models
  4. 2026Empty SPACE: Cross-Attention Sparsity for Concept Erasure in Diffusion Models
  5. 2026Erasing Without Collateral Damage: Precise Concept Removal in Diffusion Models
  6. 2025ACE: Attentional Concept Erasure in Diffusion Models
  7. 2026eval-unlearn: Benchmarking unlearning in Text-to-Image Diffusion Models
  8. 2024Unlearning or Concealment? A Critical Analysis and Evaluation Metrics for Unlearning in Diffusion Models