{"id":"https://openalex.org/W7166809757","doi":"https://doi.org/10.18653/v1/2026.findings-acl.444","title":"Do Multimodal RAG Systems Leak Data? A Comprehensive Evaluation of Membership Inference and Image Caption Retrieval Attacks","display_name":"Do Multimodal RAG Systems Leak Data? A Comprehensive Evaluation of Membership Inference and Image Caption Retrieval Attacks","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7166809757","doi":"https://doi.org/10.18653/v1/2026.findings-acl.444"},"language":null,"primary_location":{"id":"doi:10.18653/v1/2026.findings-acl.444","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.findings-acl.444","pdf_url":"https://aclanthology.org/2026.findings-acl.444.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2026","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://aclanthology.org/2026.findings-acl.444.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5127889923","display_name":"Ali Al-Lawati","orcid":null},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ali Al-Lawati","raw_affiliation_strings":["The Pennsylvania State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5139826621","display_name":"Suhang Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Suhang Wang","raw_affiliation_strings":["The Pennsylvania State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I130769515"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.85779844,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"9139","last_page":"9154"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.9553999900817871,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.9553999900817871,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.007300000172108412,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.0027000000700354576,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/leak","display_name":"Leak","score":0.49390000104904175},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.4846000075340271},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.46540001034736633},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.32659998536109924},{"id":"https://openalex.org/keywords/leak-detection","display_name":"Leak detection","score":0.31929999589920044},{"id":"https://openalex.org/keywords/image-processing","display_name":"Image processing","score":0.3098999857902527}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6563000082969666},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5291000008583069},{"id":"https://openalex.org/C2780378346","wikidata":"https://www.wikidata.org/wiki/Q1349983","display_name":"Leak","level":2,"score":0.49390000104904175},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4846000075340271},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.46540001034736633},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.4496000111103058},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.32659998536109924},{"id":"https://openalex.org/C2987355568","wikidata":"https://www.wikidata.org/wiki/Q4420957","display_name":"Leak detection","level":3,"score":0.31929999589920044},{"id":"https://openalex.org/C9417928","wikidata":"https://www.wikidata.org/wiki/Q1070689","display_name":"Image processing","level":3,"score":0.3098999857902527},{"id":"https://openalex.org/C61797465","wikidata":"https://www.wikidata.org/wiki/Q1188986","display_name":"Term (time)","level":2,"score":0.3068000078201294},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.296099990606308},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.26649999618530273},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2590999901294708}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.18653/v1/2026.findings-acl.444","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.findings-acl.444","pdf_url":"https://aclanthology.org/2026.findings-acl.444.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2026","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.18653/v1/2026.findings-acl.444","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.findings-acl.444","pdf_url":"https://aclanthology.org/2026.findings-acl.444.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2026","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G125128811","display_name":null,"funder_award_id":"W911NF-2110198","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G1432373144","display_name":null,"funder_award_id":"W911NF-21-1-","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G7452299184","display_name":null,"funder_award_id":"W911NF","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"}],"funders":[{"id":"https://openalex.org/F4320307791","display_name":"Cisco Systems","ror":"https://ror.org/03yt1ez60"},{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7166809757.pdf","grobid_xml":"https://content.openalex.org/works/W7166809757.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0],"growing":[1],"adoption":[2],"of":[3,38],"multimodal":[4],"Retrieval-Augmented":[5],"Generation":[6],"(mRAG)":[7],"pipelines":[8],"for":[9,102],"vision-centric":[10],"tasks":[11],"(e.g.,":[12,79,93],"visual":[13,77],"QA)":[14],"introduces":[15],"important":[16],"privacy":[17,54],"challenges.In":[18],"particular,":[19],"while":[20],"mRAG":[21,59,110],"provides":[22],"a":[23,68,76],"practical":[24],"capability":[25],"to":[26,51,73,89,96],"connect":[27],"private":[28,39],"datasets":[29],"and":[30,105],"improve":[31],"model":[32,64],"performance,":[33],"it":[34],"risks":[35,55],"the":[36,53,58,84,91,100],"leakage":[37],"information":[40],"from":[41],"these":[42],"datasets.In":[43],"this":[44],"paper,":[45],"we":[46,66],"perform":[47],"an":[48],"empirical":[49],"study":[50,70],"analyze":[52],"inherent":[56],"in":[57,83],"pipeline":[60],"observed":[61],"through":[62],"standard":[63],"prompting.Specifically,":[65],"implement":[67],"case":[69],"that":[71],"attempts":[72],"determine":[74],"whether":[75],"asset":[78],"image)":[80],"is":[81],"included":[82],"mRAG,":[85],"and,":[86],"if":[87],"present,":[88],"leak":[90],"metadata":[92],"caption)":[94],"related":[95],"it.Our":[97],"findings":[98],"highlight":[99],"need":[101],"privacy-preserving":[103],"mechanisms":[104],"motivate":[106],"future":[107],"research":[108],"on":[109],"privacy.":[111]},"counts_by_year":[],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2026-07-02T00:00:00"}