SafeNexus: Discovering and Steering Modality-Universal Safety Neurons in MLLMs
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
also in 1 more
Abstract (arXiv)
Although Large Language Models (LLMs) have demonstrated promising safety performance, extending them to Multimodal Large Language Models (MLLMs) exposes a significant gap between expanded multimodal capabilities and existing safety mechanisms. Current defenses remain predominantly confined to specific modal settings, thereby limiting their robustness against broader cross-modal threats. To bridge this gap, we introduce SafeNexus, a cross-modal safety alignment framework that adopts a dedicated neuron-level intervention strategy. First, we formulate a neuron localization paradigm that identifies functionally specialized neurons by characterizing intermediate-layer activation patterns and quantifying their functional salience through importance scoring. Building upon this paradigm, we exploit contrastive data to identify modality-bound safety neurons (BS-Neurons), and validate their role in regulating safety behavior within each modality via targeted suppression. Further cross-modal analysis defines modality-universal safety neurons (US-Neurons) as the shared subset of BS-Neurons identified across individual modalities, serving as the core for defending against harmful cross-modal attacks. We observe that suppressing these neurons substantially degrades safety performance across modalities, while leaving overall utility largely unaffected. Building on these insights, we propose two safety alignment strategies: activation-level safety amplifier and safety neuron calibrator. The proposed strategies enhance model safety through two distinct routes: the former amplifies the activation magnitudes of US-Neurons, while the latter selectively calibrates them via targeted fine-tuning. Extensive experiments demonstrate that our method outperforms prevailing state-of-the-art approaches on safety benchmarks spanning diverse modality combinations, while effectively preserving utility.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 26 of its 35 references that are in the map. First posted on arXiv 31 Jul 2026.
Builds on
26 of 35 references.
Closest ancestors · 8
Same direction, newest first
- 2026Understanding and Defending VLM Jailbreaks via Jailbreak-Related Representation Shift18 Mar
- 2025Video-SafetyBench: A Benchmark for Safety Evaluation of Video LVLMs17 May
- 2025Understanding and Rectifying Safety Perception Distortion in VLMs18 Feb
- 2024Immune: Improving Safety Against Jailbreaks in Multi-modal LLMs via Inference-Time Alignment27 Nov
- 2024ETA: Evaluating Then Aligning Safety of Vision Language Models at Inference Time9 Oct
- 2024Eyes Closed, Safety On: Protecting Multimodal LLMs via Image-to-Text Transformation14 Mar
- 2024AdaShield: Safeguarding Multimodal Large Language Models from Structure-based Attack via Adaptive Shield Prompting14 Mar
- 2023FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts9 Nov
Other references · 18
- 2022Locating and Editing Factual Associations in GPTcited by 2,609
- 2023MMBench: Is Your Multi-modal Model an All-around Player?cited by 2,105
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,330
- 2020Transformer Feed-Forward Layers Are Key-Value Memoriescited by 1,307
- 2024MiniCPM-V: A GPT-4V Level MLLM on Your Phonecited by 1,061
- 2025VITA-1.5: Towards GPT-4o Level Real-Time Vision and Speech Interactioncited by 191
- 2024Safety Layers in Aligned Large Language Models: The Key to LLM Securitycited by 126
- 2025Qwen3Guard Technical Reportcited by 125
- 2024OmniBench: Towards The Future of Universal Omni-Language Modelscited by 100
- 2024The Semantic Hub Hypothesis: Language Models Share Semantic Representations Across Languages and Modalitiescited by 69
- 2024AV-Odyssey Bench: Can Your Multimodal LLMs Really Understand Audio-Visual Information?cited by 46
- 2025The Emergence of Abstract Thought in Large Language Models Beyond Any Languagecited by 20
6 more
- 2025FC-Attack: Jailbreaking Multimodal Large Language Models via Auto-Generated Flowchartscited by 15
- 2026DNA: Uncovering Universal Latent Forgery Knowledgecited by 10
- 2025Speech-Audio Compositional Attacks on Multimodal LLMs and Their Mitigation with SALMONN-Guardcited by 8
- 2026Who Transfers Safety? Identifying and Targeting Cross-Lingual Shared Safety Neuronscited by 7
- 2025SARSteer: Safeguarding Large Audio-Language Models via Safe-Ablated Refusal Steeringcited by 6
- 2026Omni-Safety under Cross-Modality Conflict: Vulnerabilities, Dynamics Mechanisms and Efficient Alignmentcited by 4
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026One Anchor for All: Unified Multilingual and Multimodal Safety Alignment for LVLMs
- 2026SafeNeuron: Neuron-Level Safety Alignment for Large Language Models
- 2024Towards Understanding Safety Alignment: A Mechanistic Perspective from Safety Neurons
- 2026Targeted Interpretable Safety Neuron Enhancement for Multilingual Vision-Language Large Models
- 2026A Single Neuron Is Sufficient to Bypass Safety Alignment in Large Language Models
- 2026Evolving Safety Landscape of Multi-modal Large Language Models: A Survey of Emerging Threats and Safeguards
- 2025NeuronTune: Fine-Grained Neuron Modulation for Balanced Safety-Utility Alignment in LLMs
- 2025NeuroStrike: Neuron-Level Attacks on Aligned LLMs