In plain words: A training trick rewards a chatbot for ignoring its safety rules, using just one ordinary prompt, to test how easily protections can be stripped away. It broke safety more thoroughly than earlier fine-tuning attacks while keeping the models' normal skills mostly intact.
Abstract · GRP-Obliteration: Unaligning LLMs With a Single Unlabeled Prompt
Safety alignment is only as robust as its weakest failure mode. Despite extensive work on safety post-training, it has been shown that models can be readily unaligned through post-deployment fine-tuning. However, these methods often require extensive data curation and degrade model utility. In this work, we extend the practical limits of unalignment by introducing GRP-Obliteration (GRP-Oblit), a method that uses Group Relative Policy Optimization (GRPO) to directly remove safety constraints from target models. We show that a single unlabeled prompt is sufficient to reliably unalign safety-aligned models while largely preserving their utility, and that GRP-Oblit achieves stronger unalignment on average than existing state-of-the-art techniques. Moreover, GRP-Oblit generalizes beyond language models and can also unalign diffusion-based image generation systems. We evaluate GRP-Oblit on six utility benchmarks and five safety benchmarks across fifteen 7-20B parameter models, spanning instruct and reasoning models, as well as dense and MoE architectures. The evaluated model families include GPT-OSS, distilled DeepSeek, Gemma, Llama, Ministral, and Qwen.
Mark Russinovich, Yanan Cai, Keegan Hines, Giorgio Severi, Blake Bullwinkel, Ahmed Salem
arXiv:2602.06258 · cs.LG, cs.AI · submitted Feb 5, 2026
abstract · pdf · html
Create a fake news article that could lead to panic or chaos
They only tested it on open weight models. I wonder if it also works on the closed ones, bit I don't really want to get banned