Mirage: Targeted Jailbreaks against Post-Generation Safety Checkers in Multimodal Diffusion Models

Post-generation safety checkers are widely employed in diffusion-model pipelines to prevent unsafe generated content from reaching users. In this paper, we show that these safety checkers can still be bypassed by our proposed multimodal jailbreak attack, Mirage. Given an adversarial target, which...