Search papers, labs, and topics across Lattice.
This paper introduces a novel bi-level exact unlearning attack targeting large reasoning models (LRMs), designed to force incorrect final answers while generating convincing but misleading reasoning traces. The attack overcomes challenges like non-differentiable logical constraints and weak optimization over long rationales by using a differentiable objective function, influential token alignment, and a relaxed indicator strategy. Experiments in white-box and black-box settings demonstrate the attack's effectiveness and generalizability, highlighting emerging threats to LRM unlearning pipelines.
Unlearning in large reasoning models can be exploited to generate convincing but misleading reasoning traces that lead to incorrect answers.
Large language models (LLMs) possess strong semantic understanding, driving significant progress in data mining applications. This is further enhanced by large reasoning models (LRMs), which provide explicit multi-step reasoning traces. On the other hand, the growing need for the right to be forgotten has driven the development of machine unlearning techniques, which aim to eliminate the influence of specific data from trained models without full retraining. However, unlearning may also introduce new security vulnerabilities by exposing additional interaction surfaces. Although many studies have investigated unlearning attacks, there is no prior work on LRMs. To bridge the gap, we first in this paper propose LRM unlearning attack that forces incorrect final answers while generating convincing but misleading reasoning traces. This objective is challenging due to non-differentiable logical constraints, weak optimization effect over long rationales, and discrete forget set selection. To overcome these challenges, we introduce a bi-level exact unlearning attack that incorporates a differentiable objective function, influential token alignment, and a relaxed indicator strategy. To demonstrate the effectiveness and generalizability of our attack, we also design novel optimization frameworks and conduct comprehensive experiments in both white-box and black-box settings, aiming to raise awareness of the emerging threats to LRM unlearning pipelines.
