Distributed Implicit Harm: A Compositional Safety Blind Spot in MLLM-Based Video Moderation
On the map: Multimodal LLMs / vision-language models → MLLM jailbreaks and adversarial robustness
Abstract (arXiv)
Despite their growing use in video moderation, multimodal large language models (MLLMs) exhibit a compositional safety blind spot: videos composed of seemingly benign components can convey harmful meaning when interpreted as a whole. We refer to this phenomenon as Distributed Implicit Harm (DIH), where harm arises from relations among components distributed along a decomposition axis of the video, rather than from any single explicit cue. Among many possible axes, we study two representative cases: temporally distributed harm across visual segments (DIH-T) and cross-modal harm between audio and visual streams (DIH-M). Studying and mitigating DIH at scale requires data that is difficult to collect: such videos lack compositional harm annotations, evade retrieval based on local visual cues, keywords, or single-modality signals, and are consequently absent from existing safety datasets. To bridge this gap, we develop a multi-agent synthesis framework that composes individually benign components into harmful scenarios and generates diverse DIH videos with explicit reasoning annotations, yielding a dataset of over 9,000 videos spanning visual-only and audio-visual settings. Benchmarking over 30 MLLMs spanning frontier proprietary models and leading open-source systems reveals substantial and consistent deficits in detecting both DIH-T and DIH-M. Notably, this failure persists even among the strongest frontier models: they often correctly assess individual components in isolation but fail to recognize the harmful meaning that emerges from their composition. We further evaluate these models on a manually collected set of real-world DIH videos from social media and observe the same failure mode, highlighting DIH as a practical and underexplored challenge for video moderation.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Placed in MLLM jailbreaks and adversarial robustness, one of 16 directions in Multimodal LLMs / vision-language models. Builds on 39 of its 44 references that are in the map. First posted on arXiv 31 Aug 2026.
Builds on
39 of 44 references.
Closest ancestors · 9
Same direction, newest first
- 2025Safe Semantics, Unsafe Interpretations: Tackling Implicit Reasoning Safety in Large Vision-Language Models12 Aug
- 2025SafeVid: Toward Safety Aligned Video Large Multimodal Models17 May
- 2025Video-SafetyBench: A Benchmark for Safety Evaluation of Video LVLMs17 May
- 2024VLSBench: Unveiling Visual Leakage in Multimodal Safety29 Nov
- 2024Llama Guard 3 Vision: Safeguarding Human-AI Image Understanding Conversations15 Nov
- 2024Multimodal Situational Safety8 Oct
- 2024JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attacks3 Apr
- 2024Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking Multimodal Large Language Models14 Mar
- 2023MM-SafetyBench: A Benchmark for Safety Evaluation of Multimodal Large Language Models29 Nov
Other references · 30
- 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
- 2025Qwen3 Technical Reportcited by 8,820
- 2025Qwen2.5-VL Technical Reportcited by 5,587
- 2025Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilitiescited by 3,796
- 2025Qwen3-VL Technical Reportcited by 2,793
- 2024LLaVA-OneVision: Easy Visual Task Transfercited by 2,719
- 2023InternVL: Scaling up Vision Foundation Models and Aligning for Generic Visual-Linguistic Taskscited by 2,565
- 2025InternVL3.5: Advancing Open-Source Multimodal Models in Versatility, Reasoning, and Efficiencycited by 1,510
- 2023Video-LLaMA: An Instruction-tuned Audio-Visual Language Model for Video Understandingcited by 1,471
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
- 2024MiniCPM-V: A GPT-4V Level MLLM on Your Phonecited by 1,079
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
18 more
- 2023Vision-Language Models for Vision Tasks: A Surveycited by 839
- 2025Qwen2.5-Omni Technical Reportcited by 736
- 2024LLaVA-NeXT-Interleave: Tackling Multi-image, Video, and 3D in Large Multimodal Modelscited by 584
- 2025VideoLLaMA 3: Frontier Multimodal Foundation Models for Image and Video Understandingcited by 518
- 2025Qwen3-Omni Technical Reportcited by 497
- 2024InternVideo2: Scaling Foundation Models for Multimodal Video Understandingcited by 317
- 2024mPLUG-Owl3: Towards Long Image-Sequence Understanding in Multi-Modal Large Language Modelscited by 291
- 2024MM-LLMs: Recent Advances in MultiModal Large Language Modelscited by 278
- 2025InternVideo2.5: Empowering Video MLLMs with Long and Rich Context Modelingcited by 211
- 2024The Revolution of Multimodal Large Language Models: A Surveycited by 137
- 2023How Many Unicorns Are in This Image? A Safety Evaluation Benchmark for Vision LLMscited by 108
- 2024Introducing v0.5 of the AI Safety Benchmark from MLCommonscited by 62
- 2024SafeWatch: An Efficient Safety-Policy Following Video Guardrail Model with Transparent Explanationscited by 38
- 2024SafeSora: Towards Safety Alignment of Text2Video Generation via a Human Preference Datasetcited by 35
- 2025Seeing the Arrow of Time in Large Multimodal Modelscited by 30
- 2025ShieldGemma 2: Robust and Tractable Image Content Moderationcited by 28
- 2025VLM as Policy: Common-Law Content Moderation Framework for Short Video Platformcited by 21
- 2024T2Vs Meet VLMs: A Scalable Multimodal Dataset for Visual Harmfulness Recognitioncited by 11
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026HarmVideoBench: Benchmarking Harmful Video Understanding in Large Multimodal Models
- 2026MuPHI: Learning Implicit Multimodal Harm Reasoning via Semantically Grounded Reward Optimization
- 2025From Evaluation to Defense: Advancing Safety in Video Large Language Models
- 2025Failures to Surface Harmful Contents in Video Large Language Models
- 2026Safe Alone, Unsafe Together: Safeguarding Against Implicit Toxicity When Benign Images Combine
- 2025ShieldVLM: Safeguarding the Multimodal Implicit Toxicity via Deliberative Reasoning with LVLMs
- 2026Transfer Safety Awareness for Cross-Modal Safety Drift in Multimodal Large Language Models
- 2025Falcon: A Cross-Modal Evaluation Dataset for Comprehensive Safety Perception