Last analyzed Sep 9, 2026

Language Model Security Database

Explore primary-source AI security research, evaluated models, attack techniques, and defensive evidence.

985 research findings · 1119 evaluated models

Findings

985

Models evaluated

1119

Paper-evaluated models

Any selected model can match.

Refine by category

Findings match every selected category.

Attack Type1 selected

Attack Context1 selected

Architecture Components

Attack Surface

Impact

Advanced filters

Published fromPublished throughEvidence status

Research indexed from arXiv.

Filtered research findings

21 entries

Matches every word across titles, descriptions, sources, affected systems, and models.

RoleBreak Character Jailbreak

Published Sep 25, 2024Analyzed Dec 29, 2024Source: arXiv

Large Language Models (LLMs) used in role-playing systems are vulnerable to character hallucination attacks, a form of jailbreak exploiting "query sparsity" and "role-query conflict". Query sparsity occurs when prompts fall outside the model's training data distribution, causing it to generate out-of-character responses. Role-query conflict arises when the prompt contradicts the established character persona, leading to inconsistent behavior. These vulnerabilities allow attackers to elicit…

RoleBreak: Character Hallucination as a Jailbreak Attack in Role-Playing Systems

Evaluated models: Claude 3 Haiku, GPT-3.5 Turbo, Llama 3 8B+1 more

Claude 3 Haiku
GPT-3.5 Turbo
Llama 3 8B
Mistral 7B Instruct v0.2

Research methodology

Entries summarize publicly available primary-source security research. Model names reflect only systems explicitly evaluated by the cited paper, and measurements are research-reported unless independent verification is stated.

Discovery and publication are separate: new papers enter a candidate queue, then require human review and explicit approval before publication. Updates follow that review process, not a guaranteed daily publishing schedule. “Last analyzed” is the newest analysis date among published entries; it does not mean that all recent research has been covered.