Robustness of Internal Signals for Hallucination Detection in Vision-Language Models

arXiv:2610.27041 · cs.CV, cs.AI · Submitted 2026-10-19 · Read on arXiv

cs.CV, cs.AI

Submitted: 2026-10-19

Updated: 2026-10-19

Comments: NeurIPS 2026 Evaluations and Datasets track

License: http://creativecommons.org/licenses/by/4.0/

The gist: When given an image and a text prompt, vision-language models (VLMs) can produce seemingly sophisticated text responses.

Terminology

Abstract

When given an image and a text prompt, vision-language models (VLMs) can produce seemingly sophisticated text responses. However, they are also prone to hallucinate objects in their output, which can have detrimental consequences in safety-critical applications. To detect these hallucinations, certain methods interestingly leverage internal signals from the VLM as it generates the text response; potentially, these methods use the same signals that led to a hallucination to detect it. We conduct an in-depth analysis to understand the robustness of these detection methods. First, we show that a naive baseline of a generated word's token position in the VLM text response achieves competitive performance. Further, we reveal how some detection methods rely on token position and use this heuristic as a shortcut. Second, we explore detection methods' sensitivity to language and vision modalities. Our experiments suggest that strong detection performance is often driven by detecting language-based hallucinations, and when methods rely on token position, they tend to be less visually grounded and exhibit reduced robustness when hallucinations occur earlier in a text response. Lastly, we demonstrate that different detection methods can carry complementary signals; when ensembling methods together, adding weaker methods to an ensemble of higher performing ones still offers performance improvements. Altogether, while there may be useful internal VLM signals to detect hallucinations, our investigation reveals important limitations of the current methods that try to leverage them.

Related papers