mlsanityData to 7 Oct 2026

SafeNexus: Discovering and Steering Modality-Universal Safety Neurons in MLLMs

arXiv 2607.28969 ↗First posted 31 Jul 2026cs.CVcited by 0

On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness

also in 1 more
Abstract (arXiv)

Although Large Language Models (LLMs) have demonstrated promising safety performance, extending them to Multimodal Large Language Models (MLLMs) exposes a significant gap between expanded multimodal capabilities and existing safety mechanisms. Current defenses remain predominantly confined to specific modal settings, thereby limiting their robustness against broader cross-modal threats. To bridge this gap, we introduce SafeNexus, a cross-modal safety alignment framework that adopts a dedicated neuron-level intervention strategy. First, we formulate a neuron localization paradigm that identifies functionally specialized neurons by characterizing intermediate-layer activation patterns and quantifying their functional salience through importance scoring. Building upon this paradigm, we exploit contrastive data to identify modality-bound safety neurons (BS-Neurons), and validate their role in regulating safety behavior within each modality via targeted suppression. Further cross-modal analysis defines modality-universal safety neurons (US-Neurons) as the shared subset of BS-Neurons identified across individual modalities, serving as the core for defending against harmful cross-modal attacks. We observe that suppressing these neurons substantially degrades safety performance across modalities, while leaving overall utility largely unaffected. Building on these insights, we propose two safety alignment strategies: activation-level safety amplifier and safety neuron calibrator. The proposed strategies enhance model safety through two distinct routes: the former amplifies the activation magnitudes of US-Neurons, while the latter selectively calibrates them via targeted fine-tuning. Extensive experiments demonstrate that our method outperforms prevailing state-of-the-art approaches on safety benchmarks spanning diverse modality combinations, while effectively preserving utility.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 26 of its 35 references that are in the map. First posted on arXiv 31 Jul 2026.

Builds on

26 of 35 references.

Closest ancestors · 8

Same direction, newest first

  1. 2026Understanding and Defending VLM Jailbreaks via Jailbreak-Related Representation Shift18 Mar
  2. 2025Video-SafetyBench: A Benchmark for Safety Evaluation of Video LVLMs17 May
  3. 2025Understanding and Rectifying Safety Perception Distortion in VLMs18 Feb
  4. 2024Immune: Improving Safety Against Jailbreaks in Multi-modal LLMs via Inference-Time Alignment27 Nov
  5. 2024ETA: Evaluating Then Aligning Safety of Vision Language Models at Inference Time9 Oct
  6. 2024Eyes Closed, Safety On: Protecting Multimodal LLMs via Image-to-Text Transformation14 Mar
  7. 2024AdaShield: Safeguarding Multimodal Large Language Models from Structure-based Attack via Adaptive Shield Prompting14 Mar
  8. 2023FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts9 Nov

Other references · 18

  1. 2022Locating and Editing Factual Associations in GPTcited by 2,609
  2. 2023MMBench: Is Your Multi-modal Model an All-around Player?cited by 2,105
  3. 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
  4. 2020Transformer Feed-Forward Layers Are Key-Value Memoriescited by 1,307
  5. 2024MiniCPM-V: A GPT-4V Level MLLM on Your Phonecited by 1,061
  6. 2025VITA-1.5: Towards GPT-4o Level Real-Time Vision and Speech Interactioncited by 191
  7. 2024Safety Layers in Aligned Large Language Models: The Key to LLM Securitycited by 126
  8. 2025Qwen3Guard Technical Reportcited by 125
  9. 2024OmniBench: Towards The Future of Universal Omni-Language Modelscited by 100
  10. 2024The Semantic Hub Hypothesis: Language Models Share Semantic Representations Across Languages and Modalitiescited by 69
  11. 2024AV-Odyssey Bench: Can Your Multimodal LLMs Really Understand Audio-Visual Information?cited by 46
  12. 2025The Emergence of Abstract Thought in Large Language Models Beyond Any Languagecited by 20
6 more
  1. 2025FC-Attack: Jailbreaking Multimodal Large Language Models via Auto-Generated Flowchartscited by 15
  2. 2026DNA: Uncovering Universal Latent Forgery Knowledgecited by 10
  3. 2025Speech-Audio Compositional Attacks on Multimodal LLMs and Their Mitigation with SALMONN-Guardcited by 8
  4. 2026Who Transfers Safety? Identifying and Targeting Cross-Lingual Shared Safety Neuronscited by 7
  5. 2025SARSteer: Safeguarding Large Audio-Language Models via Safe-Ablated Refusal Steeringcited by 6
  6. 2026Omni-Safety under Cross-Modality Conflict: Vulnerabilities, Dynamics Mechanisms and Efficient Alignmentcited by 4

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2026One Anchor for All: Unified Multilingual and Multimodal Safety Alignment for LVLMs
  2. 2026SafeNeuron: Neuron-Level Safety Alignment for Large Language Models
  3. 2024Towards Understanding Safety Alignment: A Mechanistic Perspective from Safety Neurons
  4. 2026Targeted Interpretable Safety Neuron Enhancement for Multilingual Vision-Language Large Models
  5. 2026A Single Neuron Is Sufficient to Bypass Safety Alignment in Large Language Models
  6. 2026Evolving Safety Landscape of Multi-modal Large Language Models: A Survey of Emerging Threats and Safeguards
  7. 2025NeuronTune: Fine-Grained Neuron Modulation for Balanced Safety-Utility Alignment in LLMs
  8. 2025NeuroStrike: Neuron-Level Attacks on Aligned LLMs