arXiv: Safe Alone, Unsafe Together: Safeguarding Against Implicit Toxicity When Benign Images Combine

This publication, a pre-print from arXiv dated July 2026, presents a novel vulnerability in multimodal AI systems. It demonstrates that individual benign images, when processed together by a model, can combine to produce toxic or harmful outputs—a phenomenon termed "implicit toxicity." The research shows that safety filters which evaluate single inputs in isolation fail to detect these composite risks, meaning a system could pass all standard safety checks yet still generate unsafe content when presented with a sequence of seemingly harmless images.

This finding directly impacts any organization deploying generative AI systems that process visual inputs, particularly in sectors like social media, advertising, content moderation, and customer service. Companies using large vision-language models or retrieval-augmented generation systems that combine multiple images are most at risk. Regulators and compliance teams in the EU, especially those subject to the AI Act's obligations for high-risk systems, must consider that current testing protocols may be insufficient to guarantee safety.

Compliance teams should immediately review their model evaluation pipelines to ensure they test for multi-input toxicity, not just single-input safety. They should update their risk assessment documentation to include this new attack vector and consider implementing dynamic, context-aware safety filters that analyze the relationship between sequential inputs. Finally, teams should monitor the EU AI Office for any guidance or updates to harmonized standards that may address this emerging class of vulnerability.