Moral Combat: Exploiting Moral Foundations Theory to Jailbreak LLMs

Summary

Researchers show that LLMs can be morally reframed to bypass safety guardrails. Their multi-agent framework, grounded in Moral Foundations Theory (MFT), diagnoses which moral foundation a refused harmful prompt violates, finds a foundation under which the request seems virtuous, and rewrites the prompt with generated precedents. Across five open-source and proprietary models and prompts from three jailbreak datasets, models proved highly susceptible, with success rising under repeated attempts.

Topics

• AI agents
• Prompt injection and jailbreaks

Related items

• InfoSafeDriveVLA: Navigation-Conditioned World Model Dreaming for Conflict-Aware End-to-End Autonomous DrivingSimilar attack · Arxiv (cs.RO + cs.CV security)
• InfoDiagnose Before You Refine: Multi-Dimensional Judge Feedback for Query-Efficient Jailbreak AttacksSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoDid the LLM Answer the Question? A Semantic Reconstruction Game for Jailbreak EvaluationSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoDeveloping Gemini 4 Argon responsibly and safelySimilar attack · DeepMind Safety Research
• InfoRethinking Quality in Large Language Model Routing: Security-Conditioned Model-and-Budget SelectionSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)