Multi-turn Jailbreaking Attack in Multi-Modal Large Language Models

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Das, Badhan Chandra, Jawad, Md Tasnim, Molto, Joaquin, Amini, M. Hadi, Wu, Yanzhao
Format: Preprint
Published: 2026
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866911362396979200
author Das, Badhan Chandra
Jawad, Md Tasnim
Molto, Joaquin
Amini, M. Hadi
Wu, Yanzhao
author_facet Das, Badhan Chandra
Jawad, Md Tasnim
Molto, Joaquin
Amini, M. Hadi
Wu, Yanzhao
contents In recent years, the security vulnerabilities of Multi-modal Large Language Models (MLLMs) have become a serious concern in the Generative Artificial Intelligence (GenAI) research. These highly intelligent models, capable of performing multi-modal tasks with high accuracy, are also severely susceptible to carefully launched security attacks, such as jailbreaking attacks, which can manipulate model behavior and bypass safety constraints. This paper introduces MJAD-MLLMs, a holistic framework that systematically analyzes the proposed Multi-turn Jailbreaking Attacks and multi-LLM-based defense techniques for MLLMs. In this paper, we make three original contributions. First, we introduce a novel multi-turn jailbreaking attack to exploit the vulnerabilities of the MLLMs under multi-turn prompting. Second, we propose a novel fragment-optimized and multi-LLM defense mechanism, called FragGuard, to effectively mitigate jailbreaking attacks in the MLLMs. Third, we evaluate the efficacy of the proposed attacks and defenses through extensive experiments on several state-of-the-art (SOTA) open-source and closed-source MLLMs and benchmark datasets, and compare their performance with the existing techniques.
format Preprint
id arxiv_https___arxiv_org_abs_2601_05339
institution arXiv
publishDate 2026
record_format arxiv
spellingShingle Multi-turn Jailbreaking Attack in Multi-Modal Large Language Models
Das, Badhan Chandra
Jawad, Md Tasnim
Molto, Joaquin
Amini, M. Hadi
Wu, Yanzhao
Cryptography and Security
Artificial Intelligence
In recent years, the security vulnerabilities of Multi-modal Large Language Models (MLLMs) have become a serious concern in the Generative Artificial Intelligence (GenAI) research. These highly intelligent models, capable of performing multi-modal tasks with high accuracy, are also severely susceptible to carefully launched security attacks, such as jailbreaking attacks, which can manipulate model behavior and bypass safety constraints. This paper introduces MJAD-MLLMs, a holistic framework that systematically analyzes the proposed Multi-turn Jailbreaking Attacks and multi-LLM-based defense techniques for MLLMs. In this paper, we make three original contributions. First, we introduce a novel multi-turn jailbreaking attack to exploit the vulnerabilities of the MLLMs under multi-turn prompting. Second, we propose a novel fragment-optimized and multi-LLM defense mechanism, called FragGuard, to effectively mitigate jailbreaking attacks in the MLLMs. Third, we evaluate the efficacy of the proposed attacks and defenses through extensive experiments on several state-of-the-art (SOTA) open-source and closed-source MLLMs and benchmark datasets, and compare their performance with the existing techniques.
title Multi-turn Jailbreaking Attack in Multi-Modal Large Language Models
topic Cryptography and Security
Artificial Intelligence
url https://arxiv.org/abs/2601.05339