{"id":"https://openalex.org/W4412889952","doi":"https://doi.org/10.18653/v1/2025.acl-long.1227","title":"Unveiling Privacy Risks in LLM Agent Memory","display_name":"Unveiling Privacy Risks in LLM Agent Memory","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4412889952","doi":"https://doi.org/10.18653/v1/2025.acl-long.1227"},"language":"en","primary_location":{"id":"doi:10.18653/v1/2025.acl-long.1227","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.acl-long.1227","pdf_url":"https://aclanthology.org/2025.acl-long.1227.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://aclanthology.org/2025.acl-long.1227.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103043659","display_name":"Bo Wang","orcid":"https://orcid.org/0000-0001-9665-5973"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bo Wang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101583943","display_name":"Weiyi He","orcid":"https://orcid.org/0000-0001-7283-7377"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Weiyi He","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111125512","display_name":"Shenglai Zeng","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shenglai Zeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085283385","display_name":"Zhen Xiang","orcid":"https://orcid.org/0000-0002-4284-2041"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhen Xiang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041044132","display_name":"Yue Xing","orcid":"https://orcid.org/0000-0001-7723-0048"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yue Xing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040639891","display_name":"Jiliang Tang","orcid":"https://orcid.org/0000-0001-7125-3898"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiliang Tang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5108946895","display_name":"Pengfei He","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pengfei He","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":30.6661,"has_fulltext":true,"cited_by_count":13,"citation_normalized_percentile":{"value":0.99604776,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"25241","last_page":"25260"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9251999855041504,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9251999855041504,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9067999720573425,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9053000211715698,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6401203870773315},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.5127228498458862},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.48893705010414124},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.4521898031234741}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6401203870773315},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5127228498458862},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.48893705010414124},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.4521898031234741}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.18653/v1/2025.acl-long.1227","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.acl-long.1227","pdf_url":"https://aclanthology.org/2025.acl-long.1227.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.18653/v1/2025.acl-long.1227","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2025.acl-long.1227","pdf_url":"https://aclanthology.org/2025.acl-long.1227.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 63rd Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5808857907","display_name":null,"funder_award_id":"DRL2405483","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G647087074","display_name":null,"funder_award_id":"IOS2107215","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7402679956","display_name":null,"funder_award_id":"IOS2035472","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7794432752","display_name":null,"funder_award_id":"IIS2212144","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8083687766","display_name":null,"funder_award_id":"CNS2246050","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320306111","display_name":"U.S. Department of Commerce","ror":"https://ror.org/04chq2495"},{"id":"https://openalex.org/F4320306137","display_name":"Bill and Melinda Gates Foundation","ror":"https://ror.org/0456r8d26"},{"id":"https://openalex.org/F4320308150","display_name":"Michigan Department of Agriculture and Rural Development","ror":"https://ror.org/023cd6641"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4412889952.pdf","grobid_xml":"https://content.openalex.org/works/W4412889952.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2584827882","https://openalex.org/W3195097297","https://openalex.org/W4225340788","https://openalex.org/W3038106605","https://openalex.org/W2513267613","https://openalex.org/W3049084372","https://openalex.org/W2528109871","https://openalex.org/W2940702331","https://openalex.org/W2905822832","https://openalex.org/W2240244939"],"abstract_inverted_index":{"Large":[0],"Language":[1],"Model":[2],"(LLM)":[3],"agents":[4,42,85],"have":[5],"become":[6],"increasingly":[7],"prevalent":[8],"across":[9],"various":[10],"realworld":[11],"applications.They":[12],"enhance":[13],"decisionmaking":[14],"by":[15],"storing":[16],"private":[17,55],"user-agent":[18],"interactions":[19],"in":[20,116],"the":[21,38,79,87,100,104,109],"memory":[22,96,114],"module":[23],"for":[24,30,112],"demonstrations,":[25],"introducing":[26],"new":[27],"privacy":[28],"risks":[29],"LLM":[31,41,80,117],"agents.In":[32],"this":[33],"work,":[34],"we":[35,59,91],"systematically":[36],"investigate":[37],"vulnerability":[39],"of":[40,76,89],"to":[43],"our":[44],"proposed":[45],"Memory":[46],"EXTRaction":[47],"Attack":[48],"(MEXTRA)":[49],"under":[50],"a":[51],"black-box":[52],"setting.To":[53],"extract":[54],"information":[56],"from":[57,98],"memory,":[58],"propose":[60],"an":[61,67],"effective":[62,113],"attacking":[63],"prompt":[64,69],"design":[65,119],"and":[66,103,120],"automated":[68],"generation":[70],"method":[71],"based":[72],"on":[73,82],"different":[74],"levels":[75],"knowledge":[77],"about":[78],"agent.Experiments":[81],"two":[83],"representative":[84],"demonstrate":[86],"effectiveness":[88],"MEXTRA.Moreover,":[90],"explore":[92],"key":[93],"factors":[94],"influencing":[95],"leakage":[97],"both":[99],"agent":[101,118],"designer's":[102],"attacker's":[105],"perspectives.Our":[106],"findings":[107],"highlight":[108],"urgent":[110],"need":[111],"safeguards":[115],"deployment.":[121]},"counts_by_year":[{"year":2026,"cited_by_count":9},{"year":2025,"cited_by_count":4}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}