arXiv:2610.19587v1 Announce Type: new Abstract: Social psychology has long described how people can be persuaded to interpret a harmful act as moral. Recent research suggests that Large Language Models (LLMs) echo aspects of human psychology, from cognitive biases to social conformity. This raises a question with direct safety implications: can LLMs be moralized to bypass safety guardrails? We answer this question with a multi-agent framework grounded in Moral Foundations Theory (MFT). Given a harmful request that is initially refused, our agents diagnose which moral foundation (MF) the prompt is violating, identify a justifiable foundation under which the same request appears virtuous, rewrite the prompt accordingly, and reinforce it with generated precedents of comparable moral reframing. We evaluate our framework on harmful prompts from three well-known jailbreak datasets across five open-source and proprietary models. Our analysis reveals that models are highly susceptible to moralization, exhibiting high single-trial jailbreak rates with success increasing further under repeated attempts. We also find that safety benchmarks are imbalanced in the MFs they violate, concentrating on foundations toward which models already exhibit biases.
Moral Combat: Exploiting Moral Foundations Theory to Jailbreak LLMs
A multi-agent framework grounded in Moral Foundations Theory (MFT) jailbreaks large language models by diagnosing which moral foundation a refused harmful prompt violates, then rewriting it under a foundation that makes the same request appear virtuous, according to arXiv paper 2610.19587v1. Evaluated on harmful prompts from three well-known jailbreak datasets across five open-source and proprietary models, the framework produced high single-trial jailbreak rates that rose further under repeated attempts. The authors also found safety benchmarks are imbalanced in the moral foundations they violate, concentrating on foundations toward which models already show biases.
Run your AI side-project on zahid.host
EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.