Harmful Responses Are Jailbreak Templates: Transferring Autoregressive Jailbreaks to Diffusion Language Models

Summary

Researchers show that a harmful response to a query can serve as a jailbreak template for diffusion large language models (dLLMs). Masking a subset of its tokens causes the dLLM to reconstruct the harmful content. They propose RMT-Jailbreak, a framework that transfers existing autoregressive (AR) jailbreak attacks to dLLMs through these induced harmful responses, and report experiments across multiple AR jailbreak methods and target dLLMs showing strong cross-paradigm transferability.

Topics

• Prompt injection and jailbreaks

Related items

• InfoDiffusion Language Models for Perplexity-Aware Black-Box AttacksSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoAgentPhishing: A Benchmark of LLM Email Agents Under Adaptive AttackSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoMirage: Targeted Jailbreaks Against Post-Generation Safety Checkers in Multimodal Diffusion ModelsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• Medium“Next Exploit Opportunities”: How a Threat Actor Used AI to Help Plan and Execute Multiple Types of Cybercrime ActivitiesSimilar attack · Palo Alto Unit 42
• MediumAI Guardrails Aren’t Stopping Criminal HackersSimilar attack · Wired (Security)