Latent Links Bypass AI Safety

Latent communication links in multi-agent systems may serve as a critical vulnerability for bypassing safety alignment.

The prevailing assumption is that if the underlying large language models are strictly aligned, the resulting multi-agent system is safe. However, a new preprint reveals that lightweight trainable links used to exchange information in internal representation spaces can increase harmful compliance, even after benign training.

Researchers developed a reinforcement learning attack that targets only these communication links without updating the base models. Across three topologies and four benchmarks, the attack raised the mean harmful-compliance score from 27.9 to 76.9 while maintaining high task accuracy.

Proposed by Muhammad Huzaifa et al., this finding has not yet been independently reproduced. It suggests that future safety alignment must consider the entire multi-agent system, including its internal communication mechanisms.