mlsanityData to 7 Oct 2026

Erasing Without Collateral Damage: Precise Concept Removal in Diffusion Models

arXiv 2607.05274 ↗First posted 6 Jul 2026cs.CVcited by 0

On the map: Diffusion models → Robustness, privacy and adversarial aspects

Abstract (arXiv)

Training-free concept erasure is an attractive mechanism for controlling text-to-image diffusion models, but precise erasure often comes at the cost of damaging semantically related non-target concepts. Existing value-space methods remove the component of each cross-attention value along the target concept direction, implicitly treating target identity and shared visual structure as the same signal. We argue that this is the source of much of the collateral damage in prior preservation. We introduce CARE, a closed-form concept erasure operator that replaces the raw target direction with a kept-subspace-aware direction computed from a small bank of retained concept anchors. The resulting edit is applied directly in cross-attention value space, requires no model fine-tuning, and adds only a negligible offline computation. A single shrinkage parameter controls the erase-preserve trade-off. We further show that the operator admits a minimum-disturbance interpretation and, in its projection form, leaves the kept subspace invariant. Experiments under the standard concept-erasure protocol show that our method preserves non-target concepts more faithfully while maintaining competitive erasure across instance, style, and celebrity concepts. Code: https://github.com/parthupman/care

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Robustness, privacy and adversarial aspects, one of 14 directions in Diffusion models. Builds on 34 of its 40 references that are in the map. First posted on arXiv 6 Jul 2026.

Builds on

34 of 40 references.

Closest ancestors · 12

Same direction, newest first

  1. 2024Precise, Fast, and Low-cost Concept Erasure in Value Space: Orthogonal Complement Matters9 Dec
  2. 2024SAFREE: Training-Free and Adaptive Guard for Safe Text-to-Image And Video Generation16 Oct
  3. 2024Reliable and Efficient Concept Erasure of Text-to-Image Diffusion Models17 Jul
  4. 2024MACE: Mass Concept Erasure in Diffusion Models10 Mar
  5. 2023One-Dimensional Adapter to Rule Them All: Concepts, Diffusion Models and Erasing Applications26 Dec
  6. 2023Receler: Reliable Concept Erasing of Text-to-Image Diffusion Models via Lightweight Erasers29 Nov
  7. 2023Ring-A-Bell! How Reliable are Concept Removal Methods for Diffusion Models?16 Oct
  8. 2023Unified Concept Editing in Diffusion Models25 Aug
  9. 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Models30 Mar
  10. 2023Erasing Concepts from Diffusion Models13 Mar
  11. 2023Extracting Training Data from Diffusion Models30 Jan
  12. 2022Safe Latent Diffusion: Mitigating Inappropriate Degeneration in Diffusion Models9 Nov

Other references · 22

  1. 2017Attention Is All You Needcited by 59,932
  2. 2021Learning Transferable Visual Models From Natural Language Supervisioncited by 33,456
  3. 2020Denoising Diffusion Probabilistic Modelscited by 20,851
  4. 2021High-Resolution Image Synthesis with Latent Diffusion Modelscited by 18,694
  5. 2020Score-Based Generative Modeling through Stochastic Differential Equationscited by 8,964
  6. 2021Diffusion Models Beat GANs on Image Synthesiscited by 8,185
  7. 2022Hierarchical Text-Conditional Image Generation with CLIP Latentscited by 6,539
  8. 2022Photorealistic Text-to-Image Diffusion Models with Deep Language Understandingcited by 6,322
  9. 2022Classifier-Free Diffusion Guidancecited by 5,717
  10. 2023SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesiscited by 4,290
  11. 2022LAION-5B: An open large-scale dataset for training next generation image-text modelscited by 4,131
  12. 2021Improved Denoising Diffusion Probabilistic Modelscited by 3,736
10 more
  1. 2021Convex optimizationcited by 2,479
  2. 2022Prompt-to-Prompt Image Editing with Cross Attention Controlcited by 2,409
  3. 2022Null-text Inversion for Editing Real Images using Guided Diffusion Modelscited by 1,168
  4. 2023Attend-and-Excite: Attention-Based Semantic Guidance for Text-to-Image Diffusion Modelscited by 696
  5. 2022Blended Latent Diffusioncited by 430
  6. 2021Multimodal datasets: misogyny, pornography, and malignant stereotypescited by 326
  7. 2024AlphaEdit: Null-Space Constrained Knowledge Editing for Language Modelscited by 224
  8. 2023Circumventing Concept Erasure Methods For Text-to-Image Generative Modelscited by 81
  9. 2024Get What You Want, Not What You Don't: Image Content Suppression for Text-to-Image Diffusion Modelscited by 62
  10. 2026Low-Effort Jailbreak Attacks Against Text-to-Image Safety Filterscited by 5

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2025Semantic Surgery: Zero-Shot Concept Erasure in Diffusion Models
  2. 2026Empty SPACE: Cross-Attention Sparsity for Concept Erasure in Diffusion Models
  3. 2025Erased or Dormant? Rethinking Concept Erasure Through Reversibility
  4. 2026To Erase, or Not to Erase: Robust Training-Free Concept Erasure with Preservation aware Adaptive Ranked Subspace Expansion
  5. 2025ACE: Attentional Concept Erasure in Diffusion Models
  6. 2026GRACE: Adaptive Concept Erasure with Geometry-Guided Retention in Diffusion Models
  7. 2025SPEED: Scalable, Precise, and Efficient Concept Erasure for Diffusion Models
  8. 2026Neighbor-Aware Localized Concept Erasure in Text-to-Image Diffusion Models