{"id":"https://openalex.org/W7166816763","doi":"https://doi.org/10.18653/v1/2026.acl-long.727","title":"Query-Efficient Agentic Graph Extraction Attacks on GraphRAG Systems","display_name":"Query-Efficient Agentic Graph Extraction Attacks on GraphRAG Systems","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7166816763","doi":"https://doi.org/10.18653/v1/2026.acl-long.727"},"language":null,"primary_location":{"id":"doi:10.18653/v1/2026.acl-long.727","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.acl-long.727","pdf_url":"https://aclanthology.org/2026.acl-long.727.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 64th Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://aclanthology.org/2026.acl-long.727.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5139774475","display_name":"Shuhua Yang","orcid":null},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shuhua Yang","raw_affiliation_strings":["The Pennsylvania State University , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University , USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139760485","display_name":"Jiahao Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jiahao Zhang","raw_affiliation_strings":["The Pennsylvania State University , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University , USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139837244","display_name":"Yilong Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yilong Wang","raw_affiliation_strings":["The Pennsylvania State University , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University , USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139787883","display_name":"Dongwon Lee","orcid":null},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dongwon Lee","raw_affiliation_strings":["The Pennsylvania State University , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University , USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5139826621","display_name":"Suhang Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Suhang Wang","raw_affiliation_strings":["The Pennsylvania State University , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University , USA","institution_ids":["https://openalex.org/I130769515"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I130769515"],"apc_list":null,"apc_paid":null,"fwci":19.2225,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.99199158,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"16017","last_page":"16041"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12292","display_name":"Graph Theory and Algorithms","score":0.36489999294281006,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12292","display_name":"Graph Theory and Algorithms","score":0.36489999294281006,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.3181000053882599,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.03689999878406525,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.45179998874664307},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.3037000000476837},{"id":"https://openalex.org/keywords/matching","display_name":"Matching (statistics)","score":0.2630999982357025},{"id":"https://openalex.org/keywords/graph-theory","display_name":"Graph theory","score":0.2563999891281128}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6395999789237976},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.45179998874664307},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4000999927520752},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.3037000000476837},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2847000062465668},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2831999957561493},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2775000035762787},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.2630999982357025},{"id":"https://openalex.org/C88230418","wikidata":"https://www.wikidata.org/wiki/Q131476","display_name":"Graph theory","level":2,"score":0.2563999891281128},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.2563999891281128}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.18653/v1/2026.acl-long.727","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.acl-long.727","pdf_url":"https://aclanthology.org/2026.acl-long.727.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 64th Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.18653/v1/2026.acl-long.727","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.acl-long.727","pdf_url":"https://aclanthology.org/2026.acl-long.727.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 64th Annual Meeting of the Association for Computational Linguistics (Volume 1: Long Papers)","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G125128811","display_name":null,"funder_award_id":"W911NF-2110198","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G1432373144","display_name":null,"funder_award_id":"W911NF-21-1-","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G3259329335","display_name":"EAGER: SaTC-EDU: A Framework for Developing Attributable Cybersecurity Case Studies","funder_award_id":"2114824","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7452299184","display_name":null,"funder_award_id":"W911NF","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G7615569247","display_name":"SFS AI + Cybersecurity: Artificial Intelligence (AI)-Integrated Training for Future Cybersecurity Workforce","funder_award_id":"2438810","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320307791","display_name":"Cisco Systems","ror":"https://ror.org/03yt1ez60"},{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7166816763.pdf","grobid_xml":"https://content.openalex.org/works/W7166816763.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Graph-based":[0],"retrieval-augmented":[1],"generation":[2],"(GraphRAG)":[3],"systems":[4,128],"construct":[5],"knowledge":[6],"graphs":[7],"over":[8],"document":[9],"collections":[10],"to":[11,53,113,132],"support":[12],"multi-hop":[13],"reasoning.While":[14],"prior":[15,108],"work":[16],"shows":[17],"that":[18,67,125],"GraphRAG":[19,127],"responses":[20],"may":[21],"leak":[22],"retrieved":[23],"subgraphs,":[24],"the":[25,31,51],"feasibility":[26],"of":[27,30,115],"queryefficient":[28],"reconstruction":[29],"hidden":[32],"graph":[33,74,80],"structure":[34],"remains":[35],"unexplored":[36],"under":[37,138],"realistic":[38],"query":[39,103,140],"budgets.We":[40],"study":[41],"a":[42,65,69,78],"budget-constrained":[43],"black-box":[44],"setting":[45],"where":[46],"an":[47],"adversary":[48],"adaptively":[49],"queries":[50],"system":[52],"steal":[54],"its":[55],"latent":[56],"entity-relation":[57],"graph.We":[58],"propose":[59],"Agentic":[60],"Graph":[61],"Extraction":[62],"Attack":[63],"(AGEA),":[64],"framework":[66],"leverages":[68],"novelty-guided":[70],"exploration-exploitation":[71],"strategy,":[72],"external":[73],"memory":[75],"modules,":[76],"and":[77,94,99,117],"two-stage":[79],"extraction":[81,135],"pipeline":[82],"combining":[83],"lightweight":[84],"discovery":[85],"with":[86],"LLM-based":[87],"filtering.We":[88],"evaluate":[89],"AGEA":[90,105],"on":[91],"medical,":[92],"agriculture,":[93],"literary":[95],"datasets":[96],"across":[97],"Microsoft-GraphRAG":[98],"LightRAG":[100],"systems.Under":[101],"identical":[102],"budgets,":[104],"significantly":[106],"outperforms":[107],"attack":[109],"baselines,":[110],"recovering":[111],"up":[112],"90%":[114],"entities":[116],"relationships":[118],"while":[119],"maintaining":[120],"high":[121],"precision.These":[122],"results":[123],"demonstrate":[124],"modern":[126],"are":[129],"highly":[130],"vulnerable":[131],"structured,":[133],"agentic":[134],"attacks,":[136],"even":[137],"strict":[139],"limits.":[141]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-08-08T01:25:22.217667","created_date":"2026-07-02T00:00:00"}