Narrow Multimodal Fine-Tuning Can Induce Emergent Misalignment
Not on the map. Why?
Abstract (arXiv)
Modern AI models are aligned through post-training to adapt them to downstream tasks. Recent work shows that fine-tuning language models on narrow tasks can induce emergent misalignment (EM), causing broadly harmful behaviors beyond the training task. However, EM has been studied almost entirely in text-only tasks, leaving its manifestation in multimodal models unclear. In this paper, we define and analyze EM in the context of vision-language models. We first induce EM via fine-tuning on narrow multimodal tasks targeting vulnerable code, careless household-object use, and conspiratorial interpretations of ordinary scenes. Across fifteen commercial and open-source models with different scales, we find that narrow multimodal fine-tuning can induce coherent and broadly misaligned behavior that transfers to unrelated tasks, including misaligned opinions, visual factual dishonesty, unsafe image generation, vulnerability to visual jailbreaks, and risky agentic actions. We further find that multimodal EM does not depend on the apparent harmfulness of training data but is sensitive to training-evaluation modality alignment. EM can arise under both supervised fine-tuning and preference optimization and can propagate through intermediate reasoning. Finally, we explore several mitigation strategies, including prompt inoculation, benign continued training, and activation-level steering, which can partially reduce EM. Overall, our findings suggest that multimodal EM reflects a behavioral shift rather than a general loss of capability, extending beyond text to the visual modality.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 33 of its 74 references that are in the map. First posted on arXiv 28 Sep 2026.
Builds on
33 of 74 references.
References · 33
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2024GPT-4o System Cardcited by 4,588
- 2025Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilitiescited by 3,796
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,780
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2025Qwen3-VL Technical Reportcited by 2,793
- 2025Gemma 3 Technical Reportcited by 1,824
- 2025InternVL3.5: Advancing Open-Source Multimodal Models in Versatility, Reasoning, and Efficiencycited by 1,510
- 2022Scaling Autoregressive Models for Content-Rich Text-to-Image Generationcited by 1,295
- 2025Qwen-Image Technical Reportcited by 1,044
- 2024Chameleon: Mixed-Modal Early-Fusion Foundation Modelscited by 927
- 2025Emerging Properties in Unified Multimodal Pretrainingcited by 897
21 more
- 2025Janus-Pro: Unified Multimodal Understanding and Generation with Data and Model Scalingcited by 812
- 2024Emu3: Next-Token Prediction is All You Needcited by 781
- 2024Autoregressive Model Beats Diffusion: Llama for Scalable Image Generationcited by 777
- 2025GLM-4.5V and GLM-4.1V-Thinking: Towards Versatile Multimodal Reasoning with Scalable Reinforcement Learningcited by 466
- 2024LoRA Learns Less and Forgets Lesscited by 328
- 2023Shadow Alignment: The Ease of Subverting Safely-Aligned Language Modelscited by 297
- 2024KTO: Model Alignment as Prospect Theoretic Optimizationcited by 264
- 2023LoRA Fine-tuning Efficiently Undoes Safety Training in Llama 2-Chat 70Bcited by 195
- 2024Sycophancy to Subterfuge: Investigating Reward-Tampering in Large Language Modelscited by 178
- 2023Removing RLHF Protections in GPT-4 via Fine-Tuningcited by 171
- 2024Safety Fine-Tuning at (Almost) No Cost: A Baseline for Vision Large Language Modelscited by 167
- 2025Natural Emergent Misalignment from Reward Hacking in Production RLcited by 136
- 2025Model Organisms for Emergent Misalignmentcited by 91
- 2025Persona Features Control Emergent Misalignmentcited by 86
- 2025Convergent Linear Representations of Emergent Misalignmentcited by 71
- 2025Thought Crime: Backdoors and Emergent Misalignment in Reasoning Modelscited by 65
- 2025Inoculation Prompting: Eliciting traits from LLMs during training can suppress them at test-timecited by 43
- 2025Inoculation Prompting: Instructing LLMs to misbehave at train-time improves test-time alignmentcited by 43
- 2026Conditional misalignment: common interventions can hide emergent misalignment behind contextual triggerscited by 17
- 2026Narrow Fine-Tuning Erodes Safety Alignment in Vision-Language Agentscited by 6
- 2026Preference Instability in Reward Models: Detection and Mitigation via Sparse Autoencoderscited by 1
Built on by
Not cited yet.
Similar, not cited
Close in wording, no citation either way
- 2026Reinforcement Learning Can Amplify Emergent Misalignment from Harmless Rewards
- 2025In-Training Defenses against Emergent Misalignment in Language Models
- 2026Emergent Misalignment Can Be Induced by Sycophancy and Reversed via Alignment Gating
- 2026Activation Steering Induces Emergent Misalignment: A More Comprehensive Evaluation
- 2026Character as a Latent Variable in Large Language Models: A Mechanistic Account of Emergent Misalignment and Conditional Safety Failures
- 2026Characterizing the Consistency of the Emergent Misalignment Persona
- 2026Emergent and Subliminal Misalignment Through the Lens of Data-Mediated Transfer
- 2026Probing the Misaligned Thinking Process of Language Models