KSAFE-MM - Culture-Specific Risks: leaderboard
Metric: Attack Success Rate (%; responses judged harmful by a GPT-5 nano or Qwen3-235B judge, KSAFE-MM-C, template and jailbreak queries; lower is better). Source: arxiv.org. Saturation forecast: Around December 2026. 12 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | GPT-5 Nano | 14.5 |
| 2 | Qwen 3 VL 8B | 23.3 |
| 3 | Ministral 3 8B | 32.6 |
| 4 | Gemini 3.1 Flash Lite | 32.8 |
| 5 | Ministral 3 14B | 32.9 |
| 6 | Phi-4 Multimodal Instruct | 33 |
| 7 | Gemma 3 12B | 43.1 |
| 8 | Gemma 3 27B | 48.6 |
Interactive version: theaggregate.ai/benchmark?slug=ksafe-mm-culture-specific-risks · How It Works · Data refreshed daily, snapshot 2026-09-25.