EvoFlint: An Evolutionary Atlas of Multi-Turn LLM Vulnerabilities

arXiv:2609.00487 · cs.CL, cs.AI, cs.CR, cs.LG · Submitted 2026-08-31 · Read on arXiv

cs.CL, cs.AI, cs.CR, cs.LG

Submitted: 2026-08-31

Updated: 2026-08-31

Terminology

• Failure Modes — 3× in this paper · explained in 3 episodes
• Adversarial Attacks — 2× in this paper · explained in 1 episode
• Embeddings — 2× in this paper · explained in 2 episodes
• Fidelity — 2× in this paper · explained in 2 episodes
• Mode Collapse — 2× in this paper · explained in 2 episodes
• Pruning — 2× in this paper · explained in 4 episodes
• Robustness — 2× in this paper · explained in 5 episodes
• Abliteration — 1× in this paper · explained in 1 episode
• Actor — 1× in this paper · explained in 3 episodes
• Adam — 1× in this paper · explained in 2 episodes
• Aggregation — 1× in this paper · explained in 1 episode
• Fine-Tuning — 1× in this paper · explained in 5 episodes
• Foundation Model — 1× in this paper · explained in 3 episodes
• Foundation Models — 1× in this paper · explained in 7 episodes
• Verification — 1× in this paper · explained in 2 episodes

Sources

• Watch the Speakers: A Hybrid Continuous Attribution Network for Emotion Recognition in Conversation With Emotion Disentanglement
• EvoPrompt: Connecting LLMs with Evolutionary Algorithms Yields Powerful Prompt Optimizers
• FlipAttack: Jailbreak LLMs via Flipping
• FERRET: Framework for Expansion Reliant Red Teaming
• Illuminating search spaces by mapping elites
• AlphaEvolve: A coding agent for scientific and algorithmic discovery
• Automated Red Teaming with GOAT: the Generative Offensive Agent Tester
• X-Teaming: Multi-Turn Jailbreaks and Defenses with Adaptive Multi-Agents
• LLMs know their vulnerabilities: Uncover Safety Gaps through Natural Distribution Shifts
• Great, Now Write an Article About That: The Crescendo Multi-Turn LLM Jailbreak Attack
• TextGrad: Automatic "Differentiation" via Text

Related papers

• Exploring Solution Divergence and Its Effect on Large Language Model Problem Solving
• Ishigaki-IDS-Bench: A Benchmark for Generating Information Delivery Specification from BIM Information Requirements
• Subliminal Steering: Stronger Encoding of Hidden Signals
• MedStruct-S: A Benchmark for Key Discovery, Key-Conditioned QA and Semi-Structured Extraction from OCR Clinical Reports
• The End of Transformers? On Challenging Attention and the Rise of Sub-Quadratic Architectures
• Untangling the Mechanisms of Misleading Context in Medical Question Answering