Multilingual Jailbreak Challenges in Large Language Models
Date: 2023-10
Affected: ChatGPT, GPT-4
Attack vector: jailbreak
Category: research
Severity: High

Deng et al. quantify unintentional and intentional multilingual jailbreaks in ChatGPT and GPT-4 across nine languages. They release the MultiJail dataset and show low-resource languages encounter unsafe content roughly three times more often than high-resource languages.


Mitigations:

Architectural layers (MAESTRO):