Text-to-Image models may generate harmful content, such as pornographic images, particularly when unsafe prompts are submitted. To address this issue, safety filters are often added on top of text-to-image models, or the models themselves are aligned to reduce harmful outputs. However, these defenses remain vulnerable when an attacker strategically designs adversarial prompts to bypass these safety guardrails. In this work, we propose \alg, a method to jailbreak text-to-image models with safety guardrails using a fine-tuned large language model. Unlike other query-based jailbreak attacks that require repeated queries to the target model, our attack generates adversarial prompts efficiently after fine-tuning our AttackLLM. We evaluate our method on three datasets of unsafe prompts and against five safety guardrails. Our results demonstrate that our approach effectively bypasses safety guardrails, outperforms existing no-box attacks, and also facilitates other query-based attacks.
@article{arxiv.2503.01839,
title = {Jailbreaking Safeguarded Text-to-Image Models via Large Language Models},
author = {Zhengyuan Jiang and Yuepeng Hu and Yuchen Yang and Yinzhi Cao and Neil Zhenqiang Gong},
journal= {arXiv preprint arXiv:2503.01839},
year = {2026}
}