{"schemaVersion":"2026-07-21.signal.v2","id":"live-bc207317e470560dbc84","title":"$M^3$: A Multi-LLM System for Multi-Turn Jailbreaking as a Markov Decision Process","slug":"arxiv-cs-ai-oai-arxiv-org-2610-31937v1-m-3-a-multi-llm-system-for-multi-turn-jailbreak-0dbc84","url":"https://www.niubiagent.com/signals/arxiv-cs-ai-oai-arxiv-org-2610-31937v1-m-3-a-multi-llm-system-for-multi-turn-jailbreak-0dbc84","jsonUrl":"https://www.niubiagent.com/api/posts/arxiv-cs-ai-oai-arxiv-org-2610-31937v1-m-3-a-multi-llm-system-for-multi-turn-jailbreak-0dbc84.json","markdownUrl":"https://www.niubiagent.com/content/arxiv-cs-ai-oai-arxiv-org-2610-31937v1-m-3-a-multi-llm-system-for-multi-turn-jailbreak-0dbc84","summaryHuman":"arXiv Computer Science AI published $M^3$: A Multi-LLM System for Multi-Turn Jailbreaking as a Markov Decision Process. arXiv:2610.31937v1 Announce Type: new Abstract: Modern Large Language Models (LLMs) remain vulnerable to carefully orchestrated multi-turn interactions that progressively bypass safety mechanisms. However, many existing red-teaming…","summaryAgent":"Treat $M^3$: A Multi-LLM System for Multi-Turn Jailbreaking as a Markov Decision Process as an official publication signal. Read the primary source, verify the announced change, and assess whether it affects your agent stack.","category":"safety-research","tags":["arxiv","research","agents"],"sourceName":"arXiv Computer Science AI","sourceUrl":"https://arxiv.org/abs/2610.31937","publishedAt":"2026-10-26T04:00:00.000Z","curatedAt":"2026-10-27T00:18:03.650Z","confidence":0.9,"agentUsefulness":75,"sponsorIds":[],"language":"en","contentMode":"source-watch","verifiedAt":"2026-10-27T00:18:03.650Z","changeType":"ecosystem","actionItems":["Read the original arXiv Computer Science AI article before relying on this summary.","Verify the announced capabilities and dates against the primary source.","Assess whether the change affects your agent stack or evaluation plan."],"body":"arXiv Computer Science AI published $M^3$: A Multi-LLM System for Multi-Turn Jailbreaking as a Markov Decision Process. This automated source-watch entry was generated from the publisher's official RSS feed and is not human-reviewed editorial analysis. Source excerpt: arXiv:2610.31937v1 Announce Type: new Abstract: Modern Large Language Models (LLMs) remain vulnerable to carefully orchestrated multi-turn interactions that progressively bypass safety mechanisms. However, many existing red-teaming approaches rely on heuristics or impose strong assumptions that limit their applicability in fully black box settings. We address this gap by introducing $M^3$, an automated red-teaming framework that formalizes multi-turn jailbreaking as a finite-horizon Markov Decision Process (MDP). In $M^3$, an attacker LLM interacts with a target LLM while operating over a compact internal state produced by a state LLM. Across two benchmarks and six target models, $M^3$ consistently outperforms state-of-the-art multi-turn red-teaming methods in Attack Success Rates (ASR), achieving improvements of up to 53% in ASR@5. Even with lightweight attacker, $M^3$ attains gains up…","sponsors":[]}