Prosody-driven Jailbreaks in Audio LLMs: A Controlled Study and Mechanistic Analysis

Prosody-driven speech variations like high arousal, anger, and increased speaking rates bypass safety filters in audio LLMs while maintaining identical transcript content. Using the AdvAudio-Prosody benchmark, researchers found Qwen2-Audio jailbreak rates jump from 4/95 in neutral tones to 38/95 for panic-driven prosody.