Tokenization Vulnerabilities in Knowledge Editing and Unlearning

Alternative valid tokenizations can bypass localized model editing and unlearning by inducing different computational trajectories for the same input string. This finding demonstrates that current security evaluations of machine unlearning are insufficient when tokenization is treated as a benign preprocessing step.