Controlled Decoding Attacks on Black-Box LLMs.

arXiv:2609.36956v2 Announce Type: replace-cross Abstract: Manipulating next-token probabilities during generation can bypass the safety alignment of large language models. Existing approaches, however, rely on access to model weights or numerical token probabi