Marking the Wrong Symptoms: Evaluating LLM Watermarks in Medical Texts
On the map: LLM safety and security → Watermarking generated content and models
Abstract (arXiv)
Large language models (LLMs) are increasingly integrated into clinical workflows, stressing the need for reliable traceability of model-generated output with watermarking. Yet, most watermarks are evaluated on general-purpose benchmarks, leaving domains like medicine, where small token-level perturbations can result in significant semantic changes, underexplored. In this work, we present the first rigorous study of how LLM watermarks affect medical performance, benchmarking 5 watermarking schemes across 11 LLMs and 7 VLMs on various tasks spanning unimodal and multimodal clinical reasoning. Importantly, we complement existing evaluations by introducing a human-expert-validated pipeline for systematically auditing medical reasoning quality, terminological precision, and induced hallucinations. Our results reveal that watermarking can induce substantial degradation across multiple failure modes, including lexical corruption, hallucinated terminology, and amplified misattribution or omission of image findings. Notably, we find that the absence of domain-specific analyses, combined with aggregate metrics that miss failures inherent to clinical text, can systematically obscure practical watermark-induced degradations. Our findings establish domain-specific evaluation as a prerequisite for the safe deployment of watermarked models in medicine, where current benchmarks can otherwise mask clinically consequential failures.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Watermarking generated content and models, one of 12 directions in LLM safety and security. Builds on 23 of its 40 references that are in the map. First posted on arXiv 16 May 2026.
Builds on
23 of 40 references.
Closest ancestors · 8
Same direction, newest first
- 2026A Unified Framework for LLM Watermarks6 Feb
- 2025Factuality Beyond Coherence: Evaluating LLM Watermarking Methods for Medical Texts9 Sep
- 2025Enhancing Watermarking Quality for LLMs via Contextual Generation States Awareness9 Jun
- 2023A Survey of Text Watermarking in the Era of Large Language Models13 Dec
- 2023WaterBench: Towards Holistic Evaluation of Watermarks for Large Language Models13 Nov
- 2023Robust Distortion-free Watermarks for Language Models28 Jul
- 2023Who Wrote this Code? Watermarking for Code Generation24 May
- 2023A Watermark for Large Language Models24 Jan
Other references · 15
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2025Gemma 3 Technical Reportcited by 1,686
- 2020What Disease does this Patient Have? A Large-scale Open Domain Question Answering Dataset from Medical Examscited by 1,324
- 2024Phi-4 Technical Reportcited by 675
- 2025MedGemma Technical Reportcited by 398
- 2025HealthBench: Evaluating Large Language Models Towards Improved Human Healthcited by 385
- 2025Lingshu: A Generalist Foundation Model for Unified Multimodal Medical Understanding and Reasoningcited by 217
- 2025MedXpertQA: Benchmarking Expert-Level Medical Reasoning and Understandingcited by 212
- 2024OmniMedVQA: A New Large-Scale Comprehensive Evaluation Benchmark for Medical LVLMcited by 182
- 2023Med-HALT: Medical Domain Hallucination Test for Large Language Modelscited by 156
- 2024GMAI-MMBench: A Comprehensive Multimodal Evaluation Benchmark Towards General Medical AIcited by 96
- 2024UltraMedical: Building Specialized Generalists in Biomedicinecited by 67
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026CURE: A Multimodal Benchmark for Clinical Understanding and Retrieval Evaluation
- 2026Clinical Reasoning Graphs: Structured Evaluation of LLM Diagnostic Reasoning Reveals Competence Without Consistency
- 2026CLExEval: A Human-in-the-Loop Framework for Qualitative Evaluation of LLM Clinical Reasoning
- 2025MedHELM: Holistic Evaluation of Large Language Models for Medical Tasks
- 2025Beyond the Leaderboard: Rethinking Medical Benchmarks for Large Language Models
- 2025Inflated Excellence or True Performance? Rethinking Medical Diagnostic Benchmarks with Dynamic Evaluation
- 2025MedRECT: A Medical Reasoning Benchmark for Error Correction in Clinical Texts
- 2025Benchmarking Chinese Medical LLMs: A Medbench-based Analysis of Performance Gaps and Hierarchical Optimization Strategies