mlsanityData to 14 Oct 2026

Do Models Share Safety Representations? Cross-Model Steering for Safe Visual Generation

arXiv 2606.05290 ↗First posted 3 Jun 2026cs.CV cs.AI cs.MMcited by 2

Not on the map. Why?

Abstract (arXiv)

Recent progress in generative modeling has made safety control a central challenge, yet existing approaches remain largely model-specific, requiring retraining or tailored interventions for each new architecture. In this work, we ask whether safety can be represented as a portable latent direction, learned once and reused across heterogeneous generators. We introduce the first framework for cross-model safety steering, in which a safety direction is estimated in a source LLM from paired safe-unsafe prompts, transported to a target generator through a lightweight alignment fitted on benign data alone, and applied at inference time. Crucially, our pipeline never accesses unsafe data on the target side, isolating whether safety can be transferred through shared representation geometry. Beyond a single global direction, we also identify a multi-vector extension that captures category-specific safety behaviors, enabling more selective control. We evaluate our approach in text-to-image and text-to-video generation across diverse source-target model pairs. Across models, transferred safety directions achieve ASR reduction and CLIP-Score/FID trade-offs comparable to directions learned natively on the target model using unsafe data, while requiring no target-side unsafe data. This indicates that safety improvements do not come at the expense of generation quality. Our results point to a modular view of safety: safety-relevant behavior is not purely model-local, but can be controlled through latent directions that persist across models. This suggests a new path toward lightweight, reusable safety mechanisms that do not require target-side unsafe data.

Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 50 of its 59 references that are in the map. First posted on arXiv 3 Jun 2026.

Builds on

50 of 59 references.

References · 50

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,744
  2. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,863
  3. 2014Microsoft COCO: Common Objects in Contextcited by 17,608
  4. 2024The Llama 3 Herd of Modelscited by 14,715
  5. 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
  6. 2025Qwen3 Technical Reportcited by 8,820
  7. 2025Qwen2.5-VL Technical Reportcited by 5,587
  8. 2024Scaling Rectified Flow Transformers for High-Resolution Image Synthesiscited by 4,181
  9. 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,152
  10. 2021On the Opportunities and Risks of Foundation Modelscited by 4,033
  11. 2023Mistral 7Bcited by 3,164
  12. 2016Pointer Sentinel Mixture Modelscited by 3,096
38 more
  1. 2025Wan: Open and Advanced Large-Scale Video Generative Modelscited by 2,708
  2. 2023A Survey of Large Language Modelscited by 2,576
  3. 2023Representation Engineering: A Top-Down Approach to AI Transparencycited by 1,336
  4. 2023Steering Llama 2 via Contrastive Activation Additioncited by 1,085
  5. 2025Qwen-Image Technical Reportcited by 1,044
  6. 2024Refusal in Language Models Is Mediated by a Single Directioncited by 1,032
  7. 2023Steering Language Models With Activation Engineeringcited by 922
  8. 2023The Linear Representation Hypothesis and the Geometry of Large Language Modelscited by 716
  9. 2023Erasing Concepts from Diffusion Modelscited by 539
  10. 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Modelscited by 513
  11. 2023Unified Concept Editing in Diffusion Modelscited by 388
  12. 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 386
  13. 2024The Platonic Representation Hypothesiscited by 382
  14. 2021Persistent Anti-Muslim Bias in Large Language Modelscited by 377
  15. 2021Multimodal datasets: misogyny, pornography, and malignant stereotypescited by 327
  16. 2024Improving Alignment and Robustness with Circuit Breakerscited by 322
  17. 2024MACE: Mass Concept Erasure in Diffusion Modelscited by 307
  18. 2025Z-Image: An Efficient Image Generation Foundation Model with Single-Stream Diffusion Transformercited by 277
  19. 2014Understanding image representations by measuring their equivariance and equivalencecited by 243
  20. 2022Extracting Latent Steering Vectors from Pretrained Language Modelscited by 225
  21. 2021Revisiting Model Stitching to Compare Neural Representationscited by 209
  22. 2023MMA-Diffusion: MultiModal Attack on Diffusion Modelscited by 194
  23. 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applicationscited by 169
  24. 2024Improving Instruction-Following in Language Models through Activation Steeringcited by 160
  25. 2022Can Machines Help Us Answering Question 16 in Datasheets, and In Turn Reflecting on Inappropriate Content?cited by 155
  26. 2023UniMax: Fairer and more Effective Language Sampling for Large-Scale Multilingual Pretrainingcited by 151
  27. 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Eraserscited by 120
  28. 2024Latent Guard: a Safety Framework for Text-to-image Generationcited by 71
  29. 2024Controlling Language and Diffusion Models by Transporting Activationscited by 68
  30. 2024T2VSafetyBench: Evaluating the Safety of Text-to-Video Generative Modelscited by 66
  31. 2025Harnessing the Universal Geometry of Embeddingscited by 55
  32. 2025Transferring Linear Features Across Language Models With Model Stitchingcited by 21
  33. 2025Activation Space Interventions Can Be Transferred Between Large Language Modelscited by 19
  34. 2025Video Unlearning via Low-Rank Refusal Vectorcited by 13
  35. 2025Cross-model Transferability among Large Language Models on the Platonic Representations of Conceptscited by 12
  36. 2025Mitigating Sexual Content Generation via Embedding Distortion in Text-conditioned Diffusion Modelscited by 7
  37. 2025Linear Representation Transferability Hypothesis: Leveraging Small Models to Steer Large Modelscited by 7
  38. 2026Conditioned Activation Transport for T2I Safety Steeringcited by 3

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 2.

2 papers.