Visual-Noise Guided In-Context Distillation for Multimodal Large Language Model Unlearning
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
also in 1 more
Abstract (arXiv)
Multimodal Large Language Models (MLLMs) have achieved remarkable progress on vision-language tasks, but they may also memorize and expose sensitive or restricted knowledge, raising concerns about privacy and broader safety risks. Machine Unlearning (MU) provides a promising way to remove targeted undesirable knowledge from trained models without retraining from scratch while preserving general model utility. Nevertheless, effective unlearning in MLLMs remains particularly challenging. Existing training-based methods often struggle to balance unlearning effectiveness and model utility. In contrast, training-free methods such as in-context unlearning preserve model utility by avoiding parameter updates, but they do not remove memorized knowledge at the parameter level and may remain vulnerable to reverse-engineering attacks. More importantly, in-context unlearning is insufficient in multimodal settings, where visual inputs can provide strong conditioning signals and induce undesirable outputs. To address these challenges, we propose Visual-Noise Guided In-Context Distillation (VGID), a distillation-based framework for MLLM unlearning. VGID dynamically constructs an unlearning-oriented teacher distribution from the frozen base model through dual-modal intervention that combines visual perturbation with textual in-context unlearning. The resulting intervention-induced distribution serves as a teacher signal for distillation, guiding the student model toward parameter-level unlearning without requiring external teacher models or explicit undesirable response annotations. Experimental results show that VGID achieves strong unlearning effectiveness while preserving competitive model utility, reducing forget set ROUGE-L by 0.371 with only a 0.055 drop in retain set ROUGE-L in a representative setting.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 38 of its 43 references that are in the map. First posted on arXiv 26 May 2026.
Builds on
38 of 43 references.
Closest ancestors · 7
Same direction, newest first
- 2025Bridging the Copyright Gap: Do Large Vision-Language Models Recognize and Respect Copyrighted Content?26 Dec
- 2025SafeEraser: Enhancing Safety in Multimodal Large Language Models through Multimodal Machine Unlearning18 Feb
- 2024Benchmarking Vision Language Model Unlearning via Fictitious Facial Identity Dataset5 Nov
- 2024Protecting Privacy in Multimodal Large Language Models with MLLMU-Bench29 Oct
- 2024Single Image Unlearning: Efficient Machine Unlearning in Multimodal Large Language Models21 May
- 2024Safety of Multimodal Large Language Models on Images and Texts1 Feb
- 2023MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models29 Nov
Other references · 31
- 2015Distilling the Knowledge in a Neural Networkcited by 10,076
- 2023Visual Instruction Tuningcited by 7,792
- 2024Qwen2-VL: Enhancing Vision-Language Model's Perception of the World at Any Resolutioncited by 4,151
- 2025Qwen3-VL Technical Reportcited by 2,534
- 2020Knowledge Distillation: A Surveycited by 1,578
- 2019Machine Unlearningcited by 1,020
- 2024TOFU: A Task of Fictitious Unlearning for LLMscited by 507
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearningcited by 484
- 2023Who's Harry Potter? Approximate Unlearning in LLMscited by 366
- 2023Large Language Model Unlearningcited by 288
- 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 214
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teachercited by 189
19 more
- 2024Devils in Middle Layers of Large Vision-Language Models: Interpreting, Detecting and Mitigating Object Hallucinations via Attention Lenscited by 139
- 2022Continual Learning and Private Unlearningcited by 124
- 2020Variational Bayesian Unlearningcited by 114
- 2024An Adversarial Perspective on Machine Unlearning for AI Safetycited by 113
- 2024A Comprehensive Study of Jailbreak Attack versus Defense for Large Language Modelscited by 95
- 2024What makes unlearning hard and what to do about itcited by 89
- 2019Knowledge Distillation from Internal Representationscited by 87
- 2024Look Twice Before You Answer: Memory-Space Visual Retracing for Hallucination Mitigation in Multimodal Large Language Modelscited by 72
- 2021Annealing Knowledge Distillationcited by 61
- 2024UNDIAL: Self-Distillation with Adjusted Logits for Robust Unlearning in Large Language Modelscited by 49
- 2024CLEAR: Character Unlearning in Textual and Visual Modalitiescited by 36
- 2024Machine Unlearning: A Comprehensive Surveycited by 33
- 2024Reefknot: A Comprehensive Benchmark for Relation Hallucination Evaluation, Analysis and Mitigation in Multimodal Large Language Modelscited by 30
- 2025A Comprehensive Survey of Machine Unlearning Techniques for Large Language Modelscited by 30
- 2025GUARD: Generation-time LLM Unlearning via Adaptive Restriction and Detectioncited by 17
- 2024Decoupled Alignment for Robust Plug-and-Play Adaptationcited by 9
- 2024DistillSeq: A Framework for Safety Alignment Testing in Large Language Models using Knowledge Distillationcited by 5
- 2024Self and Cross-Model Distillation for LLMs: Effective Methods for Refusal Pattern Alignmentcited by 3
- 2026DUET: Distilled LLM Unlearning from an Efficiently Contextualized Teachercited by 3
Built on by
Citing papers per year: 2026: 3.
3 papers.
Similar, not cited
Close in wording, no citation either way
- 2026On the Robustness of Machine Unlearning for Vision-Language Models
- 2025MLLMEraser: Achieving Test-Time Unlearning in Multimodal Large Language Models through Activation Steering
- 2025Robust MLLM Unlearning via Visual Knowledge Distillation
- 2026Stochastic Meta-Unlearning: Bridging Language Backbone and Multimodal Unlearning
- 2025PEBench: A Fictitious Dataset to Benchmark Machine Unlearning for Multimodal Large Language Models
- 2025Towards Benign Memory Forgetting for Selective Multimodal Large Language Model Unlearning
- 2025MMUnlearner: Reformulating Multimodal Machine Unlearning in the Era of Multimodal Large Language Models
- 2025AUVIC: Adversarial Unlearning of Visual Concepts for Multi-modal Large Language Models