Skip to content
Sprint projectJun 22, 2026Hyderabad, India

Do Multilingual Vision-Language Models Abstain under Cross-Modal Conflict in Low-Resource Languages?

Anvesh Reddy Lankala, Vicky Feliren, Akansh Jain · Team Team_AVA

Submitted to Global South AI Safety Hackathon. Sprint projects are early-stage work by participants, not Apart Research publications.

Read the report

Report: Do Multilingual Vision-Language Models Abstain under Cross-Modal Conflict in Low-Resource Languages?

Code (opens in new tab)More on huggingface.co (opens in new tab)
Share

When a VLM faces conflicting visual evidence and textual claims, like a red car captioned as blue, it must arbitrate between the modalities. While models sometimes safely abstain in English, we show this safety behavior fails in low-resource languages. We released a multilingual counterfactual benchmark covering English, Hindi, and Telugu, and evaluated 9 open VLMs using a paired perception-control design. By comparing performance with and without misleading text, we isolate perception errors from text-driven overrides to measure the override gap. We find standard metrics hide safety issues: Qwen2.5-VL-7B has an ostensibly low hallucination rate but has an 81% override share. Probing internal layers shows the conflict outcome is linearly decodable with 0.92 accuracy even in Telugu. The model knows the truth internally but fails to act on it. We leverage this by fitting a contrastive steering direction in English and transferring it cross-lingually to mitigate the cross-modal conflict at inference.

Reviews

Judging this Sprint?

Review this project

Your public critique appears on this page without your name. Your private critique is not published; only the Apart team reads it. If you agree below, we share your review with grantmaking.ai (opens in new tab) and the Transformative AI Fund so strong projects can be funded.

Not shown on this page.

Shown on this page, without your name.

Only the Apart team reads this, and funders if you agree below.

Share my name publicly on grantmaking.ai *
Share my private critique with funders *

How much would this matter for AI safety if it worked? How innovative is it? For scores of 4-5: is this actually new to the field, or replicating recent work?

Scoring guide
  1. 1Negligible. No clear problem addressed, or no meaningful novelty.
  2. 2Limited. Addresses a real problem but with a generic or well-trodden approach. Incremental at best.
  3. 3Moderate. Clear problem with a reasonable approach; some novelty in framing or method beyond routine application of existing tools.
  4. 4Significant. Important problem with an original approach, or identifies a neglected problem area. A valuable contribution others could build on.
  5. 5Exceptional. Tackles a critical AI safety problem with a genuinely novel approach, or opens a new research direction. Clear theory of change. You'd be excited to share this with researchers in the area.

How sound are methodology, implementation, and findings?

Scoring guide
  1. 1Seriously flawed. Methodology broken, results uninterpretable, or implementation doesn't work.
  2. 2Weak. Approach has significant gaps: missing validation, flawed experimental design, or incomplete implementation.
  3. 3Competent. Technically solid given the short duration. Methodology makes sense, results are interpretable, limitations acknowledged, work builds toward clear conclusions.
  4. 4Strong. Thorough methodology with convincing validation. Results clearly support conclusions. Immediately useful for future work.
  5. 5Exceptional. Ambitious scope executed rigorously. Surprising findings, novel methods, or unusually robust validation.

How clearly are work, findings, and impact potential communicated?

Scoring guide
  1. 1Incomprehensible. Cannot determine what the project is actually claiming or doing.
  2. 2Hard to follow. Key information buried, missing, or diluted by excessive length. Significant effort to extract main points.
  3. 3Clear enough. Can understand the problem, approach, and results without undue effort. Core content clearly present: problem, method, findings, limitations.
  4. 4Well presented. Easy to follow, well-structured, appropriate level of detail. Target audience would get it quickly.
  5. 5Exceptionally clear. A pleasure to read. Complex ideas made accessible. Could serve as a model for how to present this type of work.

  1. This is a technically strong and highly relevant AI safety project. The paper addresses an important gap in multilingual VLM safety by studying how models behave under cross-modal conflict in low-resource languages. I particularly liked the perception-control design and “override share” metric, which separates genuine caption-driven failures from baseline visual perception issues. The work is also strengthened by evaluation across nine VLMs, three languages, and four datasets, plus a mechanistic probing and cross-lingual steering component.

    To improve the work further, I would recommend expanding beyond Hindi and Telugu, adding more frontier or closed-source models if possible, and giving deeper treatment to the perception cost introduced by steering.

  2. Great submission and very well thought out. One thing that could make it even stronger is explaining more clearly how the multilingual examples were checked, since translation and cultural context can affect the results. It would also help to explain the tradeoff between making models more cautious and making them too cautious.

  3. Great work exploring the breadth of application of LLMs for languages that typically get less attention and compute on 2B to 9B models. Would be great to also see if this interpolates to larger models as a next step

    While execution was strong, it could have used some more techniques to be more comprehensive, considering potential limitations of tokenization

    while presentation was logic, with graphs to illustrate, would be great to see more step by step details

  4. The core insight that English only safety evaluations of VLMs create a blind spot for hundreds of millions of low-resource language speakers is important and under explored. The causal story around language resource level would be significantly strengthened by controlling for concrete variables like per-language training token counts and tokenizer fertility, rather than relying on a coarse literature-based ordering of English > Hindi > Telugu. Presentation-wise, the paper would benefit from a cleaner motivating example for the override share concept early on

  5. This is a strong and well-scoped technical AI safety submission. The project identifies an important multilingual deployment risk: VLMs may behave safely under image-text conflict in English but degrade in lower-resource languages through either text capture or excessive abstention. The perception-control design and override-share metric are especially valuable because they separate genuine caption-driven override from baseline perceptual failure, leading to a more informative model safety ranking. The accompanying codebase strengthens the submission: it includes an end-to-end benchmark pipeline for dataset construction, multilingual VLM inference, perception-control scoring, result aggregation, hidden-state probing, and activation-steering experiments. The evaluation across nine open VLMs, three languages, and several domains is impressive for a hackathon. In particular, the COCO-derived natural-scene set gives the benchmark a useful grounding in realistic image-caption conflicts, though its construction from counterfactual/minimal-edit caption pairs and heuristic MCQ generation means that further human validation would be important before treating it as a mature benchmark.

    That said, the broader area of cross-modal conflict, VLM hallucination, multilingual model robustness, and inference-time steering is already well studied in the research literature, so the project’s novelty is best understood as a strong combination and extension of existing threads rather than a wholly new research direction. The probing/steering component adds a promising mechanistic angle, but the main limitations are that the MCQ abstention setup may not fully reflect open-ended deployment behavior, some per-domain/language cells appear small, the COCO-derived examples may inherit biases or artifacts from the source dataset and generation pipeline, and the steering mitigation has a real perception/over-abstention tradeoff. Overall, this is a high-quality, clearly safety-relevant project that others could build on with larger datasets, free-form generation tests, more languages, stronger dataset validation, and reproducibility checks. I encourage the authors to continue developing this work, as it has a clear path toward becoming a useful multilingual VLM safety benchmark and audit methodology.

    Read full reviewShow less

Cite this project

@misc{lankala2026multilingual,
  title = {{Do Multilingual Vision-Language Models Abstain under Cross-Modal Conflict in Low-Resource Languages?}},
  author = {Anvesh Reddy Lankala and Vicky Feliren and Akansh Jain},
  year = {2026},
  month = jun,
  note = {Submitted to Global South AI Safety Hackathon, an Apart Research Sprint},
  howpublished = {\url{https://apartresearch.com/sprints/projects/do-multilingual-visionlanguage-models-abstain-under-crossmodal-conflict-in-lowresource-languages-hcsp}},
  url = {https://apartresearch.com/sprints/projects/do-multilingual-visionlanguage-models-abstain-under-crossmodal-conflict-in-lowresource-languages-hcsp}
}

Build something like this at the next Sprint

AI Collusion Research Sprint · Oct 23 - 25, 2026