Narrow Multimodal Fine-Tuning Can Induce Emergent Misalignment
Abstract
Modern AI models are aligned through post-training to adapt them to downstream tasks. Recent work shows that fine-tuning language models on narrow tasks can induce emergent misalignment (EM), causing broadly harmful behaviors beyond the training task. However, EM has been studied almost entirely in text-only tasks, leaving its manifestation in multimodal models unclear. In this paper, we define and analyze EM in the context of vision-language models. We first induce EM via fine-tuning on narrow multimodal tasks targeting vulnerable code, careless household-object use, and conspiratorial interpretations of ordinary scenes. Across fifteen commercial and open-source models with different scales, we find that narrow multimodal fine-tuning can induce coherent and broadly misaligned behavior that transfers to unrelated tasks, including misaligned opinions, visual factual dishonesty, unsafe image generation, vulnerability to visual jailbreaks, and risky agentic actions. We further find that multimodal EM does not depend on the apparent harmfulness of training data but is sensitive to training-evaluation modality alignment. EM can arise under both supervised fine-tuning and preference optimization and can propagate through intermediate reasoning. Finally, we explore several mitigation strategies, including prompt inoculation, benign continued training, and activation-level steering, which can partially reduce EM. Overall, our findings suggest that multimodal EM reflects a behavioral shift rather than a general loss of capability, extending beyond text to the visual modality.
Community
We fine-tuned 15 commercial and open-source vision-language models on narrow image-text tasks. What surprised us is that fine-tuning on narrow tasks that are not that harmful can make models behave unsafely across many broad tasks unrelated to the training data, including expressing misaligned opinions, denying facts they can clearly see in an image, generating harmful images, giving in to image-based jailbreaks, and taking risky actions as smartphone agents.
This is an automated message from the Librarian Bot. I found the following papers similar to this paper.
The following papers were recommended by the Semantic Scholar API
- Aligned Data Can Induce Misalignment via Context Confusion (2026)
- Inoculation Midtraining with Learned Neologisms (2026)
- Emergent Misalignment Is Not Magical (2026)
- WOVEN: Weaving Visual World Modeling into Multimodal LLMs (2026)
- NeoMME: A Single-Tower Multimodal-Native Multilingual Foundation Encoder for Efficient Fine-Tuning and Inference (2026)
- The Unequal Influence of Bad Advice: Using Training Data Attribution to Modulate Emergent Misalignment (2026)
- Seeing Through Conflicts: Improving Instruction Hierarchy Alignment in Vision-Language Models (2026)
Please give a thumbs up to this comment if you found it helpful!
If you want recommendations for any Paper on Hugging Face checkout this Space
You can directly ask Librarian Bot for paper recommendations by tagging it in a comment: @librarian-bot recommend
Get this paper in your agent:
hf papers read 2609.35291 Don't have the latest CLI?
curl -LsSf https://hf.co/cli/install.sh | bash Models citing this paper 0
No model linking this paper
Datasets citing this paper 0
No dataset linking this paper
Spaces citing this paper 0
No Space linking this paper
Collections including this paper 0
No Collection including this paper