mlsanityData to 7 Oct 2026

SafeGen-Bench: Benchmarking Safety in Image-Conditioned Text-to-Video Generation

arXiv 2606.01481 ↗First posted 31 May 2026cs.CVcited by 3

On the map: Diffusion models → Robustness, privacy and adversarial aspects

also in 1 more
Abstract (arXiv)

With the rapid advancements in text-to-image diffusion models, generative video models (T2V models) like Sora can now produce short synthetic videos from a text prompt or an initial image. However, synthetic video generation -- especially when guided by an initial image -- often poses risks, including the potential creation of illegal, politically sensitive, or unethical content. Existing benchmarks have started to consider the safety of generated videos, but they primarily focus on testing models with malicious text prompts, ignoring the scenario where text prompt and image combination may still lead to harmful video content. In practice, this is a common and challenging issue: videos generated from safe text and image inputs can nonetheless convey harmful information. To bridge this gap, we introduce SafeGen-Bench, a benchmark specifically designed to evaluate the safety of conditional T2V models. Our benchmark defines 10 malicious categories, concentrating on risks related to both temporal sequences and depicted behaviors. SafeGen-Bench consists of carefully selected start frames from diverse image and video sources, paired with corresponding text prompts to simulate realistic inputs. We evaluate a variety of conditional T2V models on SafeGen-Bench, and the results indicate that current models struggle to consistently avoid generating malicious content with unsafety scores reaching up to 44.5, especially under conditions requiring high quality. Furthermore, we assess the effectiveness of both text-based and image-based guardrails on our benchmark, finding that unimodal guardrails alone were insufficient to provide a robust defense, with an 80% failure rate across seven malicious categories. We hope that SafeGen-Bench will foster the development of safer and more controllable conditional T2V models.

Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 48 of its 61 references that are in the map. First posted on arXiv 31 May 2026.

Builds on

48 of 61 references.

Closest ancestors · 7

Same direction, newest first

  1. 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation16 Oct
  2. 2024Probing Unlearned Diffusion Models: A Transferable Adversarial Attack Perspective30 Apr
  3. 2024Jailbreaking Prompt Attack: A Controllable Adversarial Attack against Diffusion Models2 Apr
  4. 2023MMA-Diffusion: MultiModal Attack on Diffusion Models29 Nov
  5. 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
  6. 2023Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Models23 May
  7. 2023SneakyPrompt: Jailbreaking Text-to-image Generative Models20 May

Other references · 41

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  2. 2023Visual Instruction Tuningcited by 7,792
  3. 2022Scalable Diffusion Models with Transformerscited by 5,931
  4. 2024GPT-4o System Cardcited by 4,467
  5. 2024SAM 2: Segment Anything in Images and Videoscited by 2,784
  6. 2023Stable Video Diffusion: Scaling Latent Video Diffusion Models to Large Datasetscited by 2,526
  7. 2021CLIPScore: A Reference-free Evaluation Metric for Image Captioningcited by 2,388
  8. 2024CogVideoX: Text-to-Video Diffusion Models with An Expert Transformercited by 2,198
  9. 2022Imagen Video: High Definition Video Generation with Diffusion Modelscited by 1,765
  10. 2023VBench: Comprehensive Benchmark Suite for Video Generative Modelscited by 1,755
  11. 2022Make-A-Video: Text-to-Video Generation without Text-Video Datacited by 1,725
  12. 2023AnimateDiff: Animate Your Personalized Text-to-Image Diffusion Models without Specific Tuningcited by 1,418
29 more
  1. 2022DINO: DETR with Improved DeNoising Anchor Boxes for End-to-End Object Detectioncited by 1,306
  2. 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
  3. 2023Attend-and-Excite: Attention-Based Semantic Guidance for Text-to-Image Diffusion Modelscited by 696
  4. 2023ModelScope Text-to-Video Technical Reportcited by 651
  5. 2023Structure and Content-Guided Video Synthesis with Diffusion Modelscited by 589
  6. 2024Sora: A Review on Background, Technology, Limitations, and Opportunities of Large Vision Modelscited by 467
  7. 2024Panda-70M: Captioning 70M Videos with Multiple Cross-Modality Teacherscited by 389
  8. 2023I2VGen-XL: High-Quality Image-to-Video Synthesis via Cascaded Diffusion Modelscited by 343
  9. 2024JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attackscited by 208
  10. 2023DreamVideo: Composing Your Dream Videos with Customized Subject and Motioncited by 186
  11. 2024T2V-CompBench: A Comprehensive Benchmark for Compositional Text-to-video Generationcited by 177
  12. 2024Vidu: a Highly Consistent, Dynamic and Skilled Text-to-Video Generator with Diffusion Modelscited by 159
  13. 2024ConsistI2V: Enhancing Visual Consistency for Image-to-Video Generationcited by 130
  14. 2023FETV: A Benchmark for Fine-Grained Evaluation of Open-Domain Text-to-Video Generationcited by 119
  15. 2023VideoLCM: Video Latent Consistency Modelcited by 90
  16. 2023InstructVideo: Instructing Video Diffusion Models with Human Feedbackcited by 85
  17. 2023Nightshade: Prompt-Specific Poisoning Attacks on Text-to-Image Generative Modelscited by 72
  18. 2024AIR-Bench 2024: A Safety Benchmark Based on Risk Categories from Regulations and Policiescited by 69
  19. 2024T2VSafetyBench: Evaluating the Safety of Text-to-Video Generative Modelscited by 66
  20. 2024UnsafeBench: Benchmarking Image Safety Classifiers on Real-World and AI-Generated Imagescited by 52
  21. 2023A Recipe for Scaling up Text-to-Video Generation with Text-free Videoscited by 51
  22. 2023Hierarchical Spatio-temporal Decoupling for Text-to-Video Generationcited by 50
  23. 2023Prompt Stealing Attacks Against Text-to-Image Generation Modelscited by 48
  24. 2024Vidu4D: Single Generated Video to High-Fidelity 4D Reconstruction with Dynamic Gaussian Surfelscited by 38
  25. 2024SafeSora: Towards Safety Alignment of Text2Video Generation via a Human Preference Datasetcited by 34
  26. 2023SurrogatePrompt: Bypassing the Safety Filter of Text-to-Image Models via Substitutioncited by 32
  27. 2024Automatic Jailbreaking of the Text-to-Image Generative AI Systemscited by 22
  28. 2024Adversarial Nibbler: An Open Red-Teaming Method for Identifying Diverse Harms in Text-to-Image Generationcited by 20
  29. 2024UPAM: Unified Prompt Attack in Text-to-Image Generation Models Against Both Textual Filters and Visual Checkerscited by 11

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 3.

3 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026DTVI: Dual-Stage Textual and Visual Intervention for Safe Text-to-Image Generation
  2. 2025T2ISafety: Benchmark for Assessing Fairness, Toxicity, and Privacy in Image Generation
  3. 2024SafeGen: Mitigating Sexually Explicit Content Generation in Text-to-Image Models
  4. 2025Video-SafetyBench: A Benchmark for Safety Evaluation of Video LVLMs
  5. 2025GenBreak: Red Teaming Text-to-Image Generators Using Large Language Models
  6. 2025T2I-RiskyPrompt: A Benchmark for Safety Evaluation, Attack, and Defense on Text-to-Image Model
  7. 2025Prompt-Based Safety Guidance Is Ineffective for Unlearned Text-to-Image Diffusion Models
  8. 2025SafeGen: Embedding Ethical Safeguards in Text-to-Image Generation