Diffusion LLMs as Targets and Adversaries: Mechanistic Safety Exploits

Diffusion-based LLMs use a fundamentally different generation process than standard autoregressive models, and their safety mechanisms are poorly understood. This paper reveals that safety alignment in diffusion LLMs is sparse and often inherited from autoregressive source models, making them vulnerable to transfer-based jailbreak attacks. The authors introduce SN-Guided Diffusion, an offline black-box jailbreak achieving high success rates across multiple model families. This research is critical for AI safety and red-teaming teams working on diffusion LLM deployment, highlighting urgent vulnerabilities that need addressing before these models see wider adoption, given attack transferability to major proprietary systems. Paper: https://arxiv.org/abs/2608.07430