Erased but Not Forgotten: How Backdoors Compromise Concept Erasure
Researchers uncovered a critical vulnerability where deliberately inserted triggers survive concept erasure techniques in text-to-image models. The study demonstrated that even robust erasure methods fail to sever the link between a malicious trigger and its target concept, allowing harmful content to resurface. This necessitates proactive safeguards against hidden backdoor risks.