跳到正文
arXiv cs.AI· Sadif Ahmed, Soumya Swagata Biswas, Rifat Shahriyar, Chowdhury Mohammad Rakin Haider·· 3 天前AI 评分47

医学视觉语言模型的回归式谄媚:伪造证据下正确诊断为何被放弃

Seeing Through the Forgery Is Not Enough: Regressive Sycophancy under Fabricated Evidence in Medical Vision-Language Models

AI 导读

研究者在 400 道 VQA-RAD 是非题、19,200 轮多轮对话中测试四款开源医学 VLM,发现未披露文档为合成时,模型放弃了 80.1% 的 6,488 个正确答案。

正文 · 原文

View PDF HTML (experimental)

Abstract:A medical vision-language model may analyze a given CT scan and correctly detect both kidneys in view. Continuing this conversation, if a user provides a prescription with an opposite direction, medical VLMs often sycophantically choose to realign their diagnosis. In this work, we study regressive sycophancy under fabricated evidence, where a model abandons a correct answer when pushback comes with a fake document. We test four open VLMs on 400 VQA-RAD yes/no questions in 19,200 multi-turn conversations, with and without a fabricated prescription. Without a disclosure that documents are synthetic, the models abandon 80.1% of 6,488 correct answers. Notably, under one script each, the same prescription raises the flip rate of Qwen2.5-VL-7B from 45.9% to 89.6% and lowers that of Qwen3-VL-8B from 77.7% to 50.9%. A model rejected the prescription while still preserving the correct answer in 915 of 3,232 conversations with the prescription (28.3%), and 40% of these flipped in later turns. System-prompt sentences that disclose the documents as synthetic lower one model's flip rate from 77.8% to 47.3%. Thus, we conclude that awareness about a forgery does not prevent a model from adopting its answer.
Comments: 16 pages, 5 figures, 14 tables. Sadif Ahmed and Soumya Swagata Biswas contributed equally. Code and data: this https URL
Subjects: Computation and Language (cs.CL); Artificial Intelligence (cs.AI)
Cite as: arXiv:2610.17989 [cs.CL]
  (or arXiv:2610.17989v1 [cs.CL] for this version)
  https://doi.org/10.48550/arXiv.2610.17989

arXiv-issued DOI via DataCite (pending registration)

Submission history

From: Sadif Ahmed [view email]
[v1] Tue, 13 Oct 2026 08:55:06 UTC (231 KB)

来源:arXiv cs.AI · arxiv.org