Multi-Turn Jailbreak Attacks

Follow this topic Ask about this topic

Momentum

0 papers in the last four weeks, against 2 the four weeks before. 0.0% of all new papers.

Jul 13Week of Sep 28

Latest papers 22

All topics

Before the Script, Set the Stage: How Worldview Simulation Amplifies Psychologically Grounded Persuasion in Multi-Turn Jailbreaking
Sep 2, 2026Siyu Chen, Haoran Wang, Xiaojian Li +3Multi-Turn Jailbreak Attacks LLM Safety Evaluation
1AI4S Center, Shanghai Qi Zhi Institute, Shanghai, 200232, China · College of AI, Tsinghua University, Beijing, 100083, China · 3Fangcun AI, Beijing, 100084, China +1
EvoFlint: An Evolutionary Atlas of Multi-Turn LLM Vulnerabilities
Aug 31, 2026Feitong Qiao, Liren Peng, Shiming Ren +7Language Model Safety Evaluation LLM Red Teaming
Reinforce Labs USA
MJ: Multi-turn LLM Jailbreaking via Decomposed Credit Assignment
Jul 13, 2026Junyoung Park, Namgyu Park, Sechan Lee +3RL for Language Models LLM Jailbreak Attacks
POSTECH GSAI · Samsung SDS · POSTECH GSAI & CSE
ANCHOR: Automated Alignment Auditing for CLI Agents on Real-World Harm
Jul 11, 2026Kefan Song, Yanjun QiAI Agent Auditing LLM Auditing
University of Virginia, Charlottesville, VA, USA
Scalable Hierarchical Attention Transformers for Multi-Turn Jailbreak Detection in Long Conversations
Jun 19, 2026Chenhui Hu, Muhammed Salih, Sudipto Guha +1Transformer Multi-Turn Jailbreak Attacks
Zscaler, Inc.
Context-Fractured Decomposition Attacks on Tool-Using LLM Agents: Exploiting Artifact Provenance Gaps
Jun 8, 2026Xiaofeng Lin, Yukai Yang, Daniel Guo +3Jailbreak Attacks LLM Agent Security
University of California, Los Angeles, USA · 2Computer Science and Engineering Department, Texas A&M University, USA · 3Cisco, USA +1
THRD: A Training-Free Multi-Turn Defense Framework for Jailbreak Attacks on Large Language Models
Jun 1, 2026Zhiqing Ma, Zhonghao Xu, Dong Yu +3LLM Safety Multi-Turn Jailbreak Attacks
1Beijing Language and Culture University · †Corresponding authors
D-Judge: Disrupting Multi-Turn Jailbreaks using Semantics-Preserving Output Rewriting
May 31, 2026Huanli Gong, Zhipeng Wei, Yu Fu +4LLM Guardrails Multi-Turn Jailbreak Attacks
University of California, Berkeley · International Computer Science Institute · University of California, Riverside +1
MultiTurnPSB: Evaluating Multi-Turn Jailbreak Attacks an dClassifier-Based Defenses for Medical AI Safety
May 30, 2026Anushka Sheoran, Yiduo HaoLanguage Model Safety Evaluation Adversarial Attacks on LLMs
University of Pennsylvania
Evolving and Detecting Multi-Turn Deception using Geometric Signatures
May 26, 2026Surender Suresh Kumar, Mary L. CummingsAdversarial Prompt Generation Deception in Language Models
George Mason University Fairfax, USA
BAIT: Boundary-Guided Disclosure Escalation LLM Jailbreaking via Self-Conditioned Reasoning
May 26, 2026Xuan Luo, Yue Wang, Geng Tu +2Jailbreak Attacks LLM Safety
The Harbin Institute of Technology, Shenzhen, China · The Hong Kong Polytechnic University, Hong Kong, China · Shenzhen University, Shenzhen, China +1
MT-JailBench: A Modular Benchmark for Understanding Multi-Turn Jailbreak Attacks
May 10, 2026Xinkai Zhang, Zhipeng Wei, Huanli Gong +4Language Model Safety Evaluation Jailbreak Attacks
1UC Berkeley · 3International Computer Science Institute · 2UC Riverside +1
Not All Turns Matter: Credit Assignment for Multi-Turn Jailbreaking
May 9, 2026Zhida He, Xiaoyu Wen, Han Qi +7RL for Language Models Credit Assignment in RL
Shanghai AI Laboratory · Fudan University · Shanghai Jiao Tong University
Mitigating Many-shot Jailbreak Attacks with One Single Demonstration
May 8, 2026Kejia Chen, Jiawen Zhang, Boheng Li +6Jailbreak Attacks In-Context Learning
Zhejiang University · Nanyang Technological University · University of Science and Technology of China +2
One Turn Too Late: Learning When to Intervene Against Multi-Turn Malicious Intent
May 7, 2026Xinjie Shen, Rongzhe Wei, Peizhi Niu +6Language Model Safety Evaluation LLM Guardrails
Georgia Institute of Technology · University of Illinois Urbana-Champaign · UCSD +3
ContextualJailbreak: Evolutionary Red-Teaming via Simulated Conversational Priming
May 4, 2026Mario Rodríguez Béjar, Francisco J. Cortés-Delgado, S. Braghin +1Evolutionary Optimization LLM Red Teaming
Universidad de Murcia · IBM Research
MultiBreak: A Scalable and Diverse Multi-turn Jailbreak Benchmark for Evaluating LLM Safety
May 3, 2026Jialin Song, Xiaodong Liu, Weiwei Yang +4LLM Safety Benchmarks Adversarial Prompt Generation
Simon Fraser University · Microsoft Research
Jailbreaking Frontier Foundation Models Through Intention Deception
Apr 27, 2026Xinhe Wang, Katia Sycara, Yaqi XieJailbreak Attacks LLM Safety
Carnegie Mellon University
Transient Turn Injection: Exposing Stateless Multi-Turn Vulnerabilities in Large Language Models
Apr 23, 2026Naheed Rayhan, Sohely JahanLanguage Model Safety Evaluation Adversarial Attacks on LLMs
Jagannath University · University of Barishal
SafeDream: Safety World Model for Proactive Early Jailbreak Detection
Apr 18, 2026Bo Yan, Weikai Lin, Yada Zhu +1Language Model Safety Evaluation World Models
University of Central Florida · University of Rochester · IBM Research
MUSE: A Run-Centric Platform for Multimodal Unified Safety Evaluation of Large Language Models
Mar 3, 2026Zhongxi Wang, Yueqian Lin, Jingyang Zhang +3LLM Safety Benchmarks Language Model Safety Evaluation
1Duke University · 2Virtue AI
Echoes of Human Malice in Agents: Benchmarking LLMs for Multi-Turn Online Harassment Attacks
Oct 16, 2025Trilok Padhi, Pinxian Lu, Abdulkadir Erol +5Adversarial Attacks on LLMs AI Agent Security Benchmarks
1Georgia State University · 2Georgia Institute of Technology · University of California, Berkeley

Sep 2, 2026, cs.CLJ/K move · Enter open · S save

Before the Script, Set the Stage: How Worldview Simulation Amplifies Psychologically Grounded Persuasion in Multi-Turn Jailbreaking

Siyu Chen, Haoran Wang, Xiaojian Li, Yao Huang+2

1AI4S Center, Shanghai Qi Zhi Institute, Shanghai, 200232, China · College of AI, Tsinghua University, Beijing, 100083, China · 3Fangcun AI, Beijing, 100084, China+1

Multi-Turn Jailbreak Attacks LLM Safety Evaluation

Open paper AskPDF arXiv

Multi-turn jailbreak attacks demonstrate that harmful intent can be distributed across dialogue, yet existing methods obscure what conversational mechanisms drive vulnerability. We introduce BLUEPRINT, a safety-evaluation framework separating a factorized social-influence strategy space from WORLDVIEWSIM, a cross-turn situational context module. Monte Carlo Tree Search optimizes turn-level combinations of 18 theory-grounded influence factors across a four-turn trajectory. Across six frontier models, BLUEPRINT achieves near-ceiling ASR on major open-weight and proprietary models, while requiring the fewest average queries (2.46). The resulting trajectories further reveal model-specific vulnerability among resistant targets: each responds to distinct influence factors and strategy transitions, yet all share a common recovery pathway-shifting toward concrete, executable task framing consistently escapes hard-refusal states. Ablations confirm operational cues matter most: making requests actionable has the largest impact, gain framing is unusually potent, and some legitimacy appeals can backfire. These findings suggest robust multi-turn safety requires monitoring not only harmful content, but also how dialogue state makes unsafe requests appear concrete and locally executable.

Momentum

Related topics

Latest papers 22