{"slug": "a-single-neuron-is-sufficient-to-bypass-safety-alignment-in-large-language", "title": "A Single Neuron Is Sufficient to Bypass Safety Alignment in Large Language Models", "summary": "Researchers at an undisclosed institution discovered that safety alignment in large language models can be bypassed by manipulating a single neuron, without training or prompt engineering, across seven models up to 70B parameters. The finding reveals that refusal behavior is mediated by individual neurons rather than being robustly distributed, posing a significant vulnerability in current AI safety mechanisms.", "body_md": "[content type paper](/research/)published July 2026\n\nA Single Neuron Is Sufficient to Bypass Safety Alignment in Large Language Models\n\nAuthorsHamid Kazemi‡, Atoosa Chegini‡†**, Maria Safi\n\nA Single Neuron Is Sufficient to Bypass Safety Alignment in Large Language Models\n\nAuthorsHamid Kazemi‡, Atoosa Chegini‡†**, Maria Safi\n\nSafety alignment in language models operates through two mechanistically distinct systems: refusal neurons that gate whether harmful knowledge is expressed, and concept neurons that encode the harmful knowledge itself. By targeting a single neuron in each system, we demonstrate both directions of failure — bypassing safety on explicit harmful requests via suppression, and inducing harmful content from innocent prompts via amplification — across seven models spanning two families and 1.7B to 70B parameters, without any training or prompt engineering. Our findings suggest that safety alignment is not robustly distributed across model weights but is mediated by individual neurons that are each causally sufficient to gate refusal behavior — suppressing any one of the identified refusal neurons bypasses safety alignment across diverse harmful requests.\n\nVLSU: Mapping the Limits of Joint Multimodal Understanding for AI Safety\n\nJanuary 27, 2026[research area Computer Vision](/research/?domain=Computer%20Vision), [research area Speech and Natural Language Processing](/research/?domain=Speech%20and%20Natural%20Language%20Processing)[conference ICLR](/research/?event=ICLR)\n\nSafety evaluation of multimodal foundation models often treats vision and language inputs separately, missing risks from joint interpretation where benign content becomes harmful in combination. Existing approaches also fail to distinguish clearly unsafe content from borderline cases, leading to problematic over-blocking or under-refusal of genuinely harmful content. We present Vision Language Safety Understanding (VLSU), a comprehensive…\n\nDisentangled Safety Adapters Enable Efficient Guardrails and Flexible Inference-Time Alignment\n\nJune 27, 2025[research area Methods and Algorithms](/research/?domain=Methods%20and%20Algorithms), [research area Speech and Natural Language Processing](/research/?domain=Speech%20and%20Natural%20Language%20Processing)[Workshop at ICLR](/research/?event=ICLR%20Workshop)\n\nThis paper was accepted at the Principled Design for Trustworthy AI, Interpretability, Robustness, and Safety across Modalities Workshop at ICLR 2026.\n\nExisting paradigms for ensuring AI safety, such as guardrail models and alignment training, often compromise either inference efficiency or development flexibility. We introduce Disentangled Safety Adapters (DSA), a novel framework addressing these challenges by decoupling safety-specific…", "url": "https://wpnews.pro/news/a-single-neuron-is-sufficient-to-bypass-safety-alignment-in-large-language", "canonical_source": "https://machinelearning.apple.com/research/single-neuron-safety-alignment", "published_at": "2026-07-07 00:00:00+00:00", "updated_at": "2026-07-07 14:59:36.394295+00:00", "lang": "en", "topics": ["large-language-models", "ai-safety", "neural-networks"], "entities": ["Hamid Kazemi", "Atoosa Chegini", "Maria Safi"], "alternates": {"html": "https://wpnews.pro/news/a-single-neuron-is-sufficient-to-bypass-safety-alignment-in-large-language", "markdown": "https://wpnews.pro/news/a-single-neuron-is-sufficient-to-bypass-safety-alignment-in-large-language.md", "text": "https://wpnews.pro/news/a-single-neuron-is-sufficient-to-bypass-safety-alignment-in-large-language.txt", "jsonld": "https://wpnews.pro/news/a-single-neuron-is-sufficient-to-bypass-safety-alignment-in-large-language.jsonld"}}