mlsanityData to 7 Oct 2026

The Illusion of High Utility in Safety Alignment of Text-to-Image Diffusion Models

arXiv 2607.00402 ↗First posted 1 Jul 2026cs.CV cs.AI cs.LGcited by 1

On the map: Diffusion models → Robustness, privacy and adversarial aspects

also in 2 more
Abstract (arXiv)

Safety alignment of text-to-image (T2I) diffusion models aims to suppress harmful generations while preserving utility on benign prompts. Recent methods often appear to deliver high safety with high utility, but this conclusion rests largely on coarse global utility metrics (e.g., FID, CLIPScore) that are insensitive to fine-grained semantic correctness, creating an illusion of high utility. We show that when utility is measured with structured evaluation, this illusion breaks: on TIFA (Text-to-Image Faithfulness evaluation with Question Answering), safety-aligned models suffer substantial drops in semantic fidelity, including failures in object counts, attributes, and relationships. To diagnose the source of this gap, we analyze the text-encoder prompt embedding space and uncover semantic collapse, a contraction of embedding spread coupled with distortion of inter-prompt similarity structure, which strongly correlates with structured utility loss. Guided by this insight, we propose StructureAware Geometric Regularization (SAGE), a safety alignment objective that explicitly preserves embedding spread and inter-prompt relational structure during adaptation. Our method restores structured utility (TIFA +5.0% over prior state-of-the-art) while maintaining strong safety performance and competitive coarse-grained utility scores. Our source code and trained models are available at https://adeelyousaf.github.io/SAGE_ECCV26_Project_Page/.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 27 of its 34 references that are in the map. First posted on arXiv 1 Jul 2026.

Builds on

27 of 34 references.

Closest ancestors · 13

Same direction, newest first

  1. 2026When Safety Collides: Resolving Multi-Category Harmful Conflicts in Text-to-Image Diffusion via Adaptive Safety Guidance24 Feb
  2. 2025Mitigating Sexual Content Generation via Embedding Distortion in Text-conditioned Diffusion Models31 Jan
  3. 2024STEREO: A Two-Stage Framework for Adversarially Robust Concept Erasing from Text-to-Image Diffusion Models29 Aug
  4. 2024Defensive Unlearning with Adversarial Training for Robust Concept Erasure in Diffusion Models24 May
  5. 2024SafeGen: Mitigating Sexually Explicit Content Generation in Text-to-Image Models10 Apr
  6. 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
  7. 2023MMA-Diffusion: MultiModal Attack on Diffusion Models29 Nov
  8. 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generation19 Oct
  9. 2023To Generate or Not? Safety-Driven Unlearned Diffusion Models Are Still Easy To Generate Unsafe Images ... For Now18 Oct
  10. 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
  11. 2023Unsafe Diffusion: On the Generation of Unsafe Images and Hateful Memes From Text-To-Image Models23 May
  12. 2023SneakyPrompt: Jailbreaking Text-to-image Generative Models20 May
1 more
  1. 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov

Other references · 14

  1. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  2. 2023BLIP-2: Bootstrapping Language-Image Pre-training with Frozen Image Encoders and Large Language Modelscited by 6,069
  3. 2015Microsoft COCO Captions: Data Collection and Evaluation Servercited by 1,447
  4. 2023GenEval: An Object-Focused Framework for Evaluating Text-to-Image Alignmentcited by 946
  5. 2024ELLA: Equip Diffusion Models with LLM for Enhanced Semantic Alignmentcited by 455
  6. 2023TIFA: Accurate and Interpretable Text-to-Image Faithfulness Evaluation with Question Answeringcited by 416
  7. 2023T2I-CompBench++: An Enhanced and Comprehensive Benchmark for Compositional Text-to-image Generationcited by 253
  8. 2022CREPE: Can Vision-Language Foundation Models Reason Compositionally?cited by 177
  9. 2022Can Machines Help Us Answering Question 16 in Datasheets, and In Turn Reflecting on Inappropriate Content?cited by 150
  10. 2024Latent Guard: a Safety Framework for Text-to-image Generationcited by 68
  11. 2024AlignGuard: Scalable Safety Alignment for Text-to-Image Generationcited by 17
  12. 2024X-Former: Unifying Contrastive and Reconstruction Learning for MLLMscited by 14
2 more
  1. 2025Universally Unfiltered and Unseen:Input-Agnostic Multimodal Jailbreaks against Text-to-Image Model Safeguardscited by 5
  2. 2025SafeR-CLIP: Mitigating NSFW Content in Vision-Language Models While Preserving Pre-Trained Knowledgecited by 3

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2025SPQR: A Multi-Dimensional Benchmark for Safety Alignment under Benign Model Adaptation
  2. 2024Safety Alignment Backfires: Preventing the Re-emergence of Suppressed Concepts in Fine-tuned Text-to-Image Diffusion Models
  3. 2024Embedding an Ethical Mind: Aligning Text-to-Image Synthesis via Lightweight Value Optimization
  4. 2026LLM Alignment--Utility Asymmetry under Semantic-Preserving Transformations
  5. 2025The Path to Reconciling Quality and Safety in Text-to-Image Generation: Dataset, Method, and Evaluation
  6. 2024AlignIT: Enhancing Prompt Alignment in Customization of Text-to-Image Models
  7. 2025Personalized Safety Alignment for Text-to-Image Diffusion Models
  8. 2026Alignment-Guided Score Matching for Text-to-Image Alignment in Diffusion Models