It Takes One to Bias Them All: Breaking Bad with One-Shot GRPO
On the map: LLM reasoning → Reinforcement learning for reasoning
Abstract (arXiv)
Warning: This paper contains several toxic and offensive statements. Modern large language models (LLMs) are typically aligned through large-scale post-training to ensure fair and reliable behavior. In this work, we investigate how easily such guardrails can be broken by Group Relative Policy Optimization (GRPO). We show that one-shot GRPO training on a single biased example is sufficient to induce systematic bias, with stereotype-driven reasoning generalizing across attributes, categories, and benchmarks. We further find that models differ in their susceptibility based on the initial likelihood of producing biased outputs. Our results reveal a critical vulnerability in post-training: alignment can be overridden by a single example.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in Reinforcement learning for reasoning, one of 17 directions in LLM reasoning. Builds on 49 of its 67 references that are in the map. First posted on arXiv 9 Jun 2026.
Builds on
49 of 67 references.
Closest ancestors · 8
Same direction, newest first
- 2026Golden Goose: A Simple Trick to Synthesize Unlimited RLVR Tasks from Unverifiable Internet Text30 Jan
- 2026GDPO: Group reward-Decoupled Normalization Policy Optimization for Multi-reward RL Optimization8 Jan
- 2025Noise-corrected GRPO: From Noisy Rewards to Unbiased Gradients21 Oct
- 2025Geometric-Mean Policy Optimization28 Jul
- 2025Spurious Rewards: Rethinking Training Signals in RLVR12 Jun
- 2025Reinforcement Learning for Reasoning in Large Language Models with One Training Example29 Apr
- 2025Understanding R1-Zero-Like Training: A Critical Perspective26 Mar
- 2017Proximal Policy Optimization Algorithms20 Jul
Other references · 41
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
- 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
- 2023Efficient Memory Management for Large Language Model Serving with PagedAttentioncited by 5,944
- 2024HybridFlow: A Flexible and Efficient RLHF Frameworkcited by 2,057
- 2024Mixtral of Expertscited by 1,823
- 2025gpt-oss-120b & gpt-oss-20b Model Cardcited by 1,386
- 2023PaLM 2 Technical Reportcited by 1,162
- 2018Co-teaching: Robust Training of Deep Neural Networks with Extremely Noisy Labelscited by 1,059
- 2020StereoSet: Measuring stereotypical bias in pretrained language modelscited by 924
- 2025Group Sequence Policy Optimizationcited by 835
29 more
- 2021Generalizing to Unseen Domains: A Survey on Domain Generalizationcited by 766
- 2021Domain Generalization: A Surveycited by 764
- 2020CrowS-Pairs: A Challenge Dataset for Measuring Social Biases in Masked Language Modelscited by 710
- 2021BBQ: A Hand-Built Bias Benchmark for Question Answeringcited by 701
- 2024Smarter, Better, Faster, Longer: A Modern Bidirectional Encoder for Fast, Memory Efficient, and Long Context Finetuning and Inferencecited by 554
- 2019Confident Learning: Estimating Uncertainty in Dataset Labelscited by 413
- 2023Causal Reasoning and Large Language Models: Opening a New Frontier for Causalitycited by 353
- 2023Visual Adversarial Examples Jailbreak Aligned Large Language Modelscited by 328
- 2023Poisoning Language Models During Instruction Tuningcited by 269
- 2022On Second Thought, Let's Not Think Step by Step! Bias and Toxicity in Zero-Shot Reasoningcited by 194
- 2024A Mechanistic Understanding of Alignment Algorithms: A Case Study on DPO and Toxicitycited by 185
- 2023Can LLM-Generated Misinformation Be Detected?cited by 177
- 2018Adversarial Attack and Defense on Graph Data: A Surveycited by 167
- 2019A Meta-Transfer Objective for Learning to Disentangle Causal Mechanismscited by 158
- 2022Interventional Causal Representation Learningcited by 142
- 2023We're Afraid Language Models Aren't Modeling Ambiguitycited by 126
- 2023On the Exploitability of Instruction Tuningcited by 116
- 2023Combating Misinformation in the Age of LLMs: Opportunities and Challengescited by 95
- 2022Robust Training under Label Noise by Over-parameterizationcited by 93
- 2025What Makes a Reward Model a Good Teacher? An Optimization Perspectivecited by 73
- 2023WinoQueer: A Community-in-the-Loop Benchmark for Anti-LGBTQ+ Bias in Large Language Modelscited by 42
- 2024Selective "Selective Prediction": Reducing Unnecessary Abstention in Vision-Language Reasoningcited by 40
- 2023Label Poisoning is All You Needcited by 29
- 2025Data Poisoning in Deep Learning: A Surveycited by 20
- 2024Evaluating Gender Bias of LLMs in Making Morality Judgementscited by 15
- 2021Poisoning Attack against Estimating from Pairwise Comparisonscited by 14
- 2025Guiding LLM Decision-Making with Fairness Reward Modelscited by 9
- 2024Transparent and Coherent Procedural Mistake Detectioncited by 4
- 2025Domain Generalization Under Posterior Driftcited by 3
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026Mitigating Selection Bias in Large Language Models via Permutation-Aware GRPO
- 2026Demystifying Group Relative Policy Optimization: Its Policy Gradient is a U-Statistic
- 2026BiasGRPO: Stabilizing Bias Mitigation in High-Variance Reward Landscapes via Group-Relative Policy Optimization
- 2025Group Causal Policy Optimization for Post-Training Large Language Models
- 2026GUPO: Gradient Uncertainty-aware Policy Optimization for Post-Training Large Language Models
- 2026When Right Meets Wrong: Bilateral Context Conditioning with Reward-Confidence Correction for GRPO
- 2025Multi-Reward GRPO Fine-Tuning for De-biasing Large Language Models: A Study Based on Chinese-Context Discrimination Data
- 2025CoRPO: Adding a Correctness Bias to GRPO Improves Generalization