mlsanityData to 7 Oct 2026

SafeCap: Improving LVLM Safety with Image Captioning Reinforcement Learning

arXiv 2608.10513 ↗First posted 11 Aug 2026cs.CV cs.AIcited by 1

On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness

also in 2 more
Abstract (arXiv)

Large vision-language models (LVLMs) remain vulnerable to jailbreak attacks that exploit visual inputs to bypass safety alignment inherited from their language backbones. We propose SafeCap, a reinforcement-learning framework that aligns LVLMs through learned self-captioning. SafeCap trains a policy model to first generate a safety-relevant image caption and then produce a final answer; the caption is further optimized by whether it enables a frozen LLM to reach a safety-aligned decision. This caption-mediated objective encourages the policy to expose visual cues relevant to safe response generation rather than relying solely on direct refusal supervision. Across five multimodal safety benchmarks and six vision-utility benchmarks, SafeCap substantially improves aggregate safety performance under its intended DirectCap protocol, with gains of 3.7-19.0 points in safety average across four model settings while maintaining comparable or improved vision utility. Under controlled comparisons on matched backbones and data, SafeCap outperforms safety SFT, DPO, and SafeGRPO, demonstrating the effectiveness of caption-mediated reinforcement learning for multimodal safety alignment.

Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 21 of its 51 references that are in the map. First posted on arXiv 11 Aug 2026.

Builds on

21 of 51 references.

Closest ancestors · 9

Same direction, newest first

  1. 2025SafeGRPO: Self-Rewarded Multimodal Safety Alignment via Rule-Governed Policy Optimization17 Nov
  2. 2025DAVSP: Safety Alignment for Large Vision-Language Models via Deep Aligned Visual Safety Prompt11 Jun
  3. 2025Understanding and Rectifying Safety Perception Distortion in VLMs18 Feb
  4. 2025A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations14 Feb
  5. 2024Immune: Improving Safety Against Jailbreaks in Multi-modal LLMs via Inference-Time Alignment27 Nov
  6. 2024Learning To See But Forgetting To Follow: Visual Instruction Tuning Makes LLMs More Prone To Jailbreak Attacks7 May
  7. 2024MLLM-Protector: Ensuring MLLM's Safety without Hurting Performance5 Jan
  8. 2023FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts9 Nov
  9. 2023Visual Adversarial Examples Jailbreak Aligned Large Language Models22 Jun

Other references · 12

  1. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
  2. 2023MM-Vet: Evaluating Large Multimodal Models for Integrated Capabilitiescited by 1,221
  3. 2023ShareGPT4V: Improving Large Multi-Modal Models with Better Captionscited by 1,000
  4. 2014Show and Tell: A Neural Image Caption Generatorcited by 877
  5. 2024Eyes Wide Shut? Exploring the Visual Shortcomings of Multimodal LLMscited by 719
  6. 2026GDPO: Group reward-Decoupled Normalization Policy Optimization for Multi-reward RL Optimizationcited by 175
  7. 2025MM-RLHF: The Next Step Forward in Multimodal LLM Alignmentcited by 79
  8. 2024Fight Back Against Jailbreaking via Prompt Adversarial Tuningcited by 63
  9. 2024Image Textualization: An Automatic Framework for Creating Accurate and Detailed Image Descriptionscited by 43
  10. 2023FuseCap: Leveraging Large Language Models for Enriched Fused Image Captionscited by 33
  11. 2024Image-to-Text Logic Jailbreak: Your Imagination can Help You Do Anythingcited by 7
  12. 2025Tit-for-Tat: Safeguarding Large Vision-Language Models Against Jailbreak Attacks via Adversarial Defensecited by 2

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2026It Is Not Seeing the Hazard: A Frozen Vision-Language Safety Score Measures Its Caption Bank
  2. 2026GuardAlign: Test-time Safety Alignment in Multimodal Large Language Models
  3. 2026Pragma-VL: Towards a Pragmatic Arbitration of Safety and Helpfulness in MLLMs
  4. 2025VisuoAlign: Safety Alignment of LVLMs with Multimodal Tree Search
  5. 2025Reimagining Safety Alignment with An Image
  6. 2025SIA: Enhancing Safety via Intent Awareness for Vision-Language Models
  7. 2025MSR-Align: Policy-Grounded Multimodal Alignment for Safety-Aware Reasoning in Vision-Language Models
  8. 2024Safe + Safe = Unsafe? Exploring How Safe Images Can Be Exploited to Jailbreak Large Vision-Language Models