JailbreakEdit: Injecting Universal Jailbreak Backdoors via Model Editing
Date: 2025-02
Affected: Llama-2-Chat, Llama-3-Instruct, Vicuna, aligned LLMs
Attack vector: backdoor
Category: research
Severity: High

Chen et al. inject universal jailbreak backdoors into safety-aligned LLMs in minutes via knowledge editing, creating shortcuts from a trigger to an estimated jailbreak space with multi-node target estimation.


Mitigations:

Architectural layers (MAESTRO):