{"id":"https://openalex.org/W7166864397","doi":"https://doi.org/10.18653/v1/2026.findings-acl.899","title":"Exposing Privacy Risks in Graph Retrieval-Augmented Generation","display_name":"Exposing Privacy Risks in Graph Retrieval-Augmented Generation","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7166864397","doi":"https://doi.org/10.18653/v1/2026.findings-acl.899"},"language":null,"primary_location":{"id":"doi:10.18653/v1/2026.findings-acl.899","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.findings-acl.899","pdf_url":"https://aclanthology.org/2026.findings-acl.899.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2026","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://aclanthology.org/2026.findings-acl.899.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5139772889","display_name":"Jiale Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jiale Liu","raw_affiliation_strings":["The Pennsylvania State University , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University , USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139760485","display_name":"Jiahao Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jiahao Zhang","raw_affiliation_strings":["The Pennsylvania State University , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University , USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5139826621","display_name":"Suhang Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Suhang Wang","raw_affiliation_strings":["The Pennsylvania State University , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University , USA","institution_ids":["https://openalex.org/I130769515"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I130769515"],"apc_list":null,"apc_paid":null,"fwci":18.9328,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.99203365,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"18073","last_page":"18093"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.310699999332428,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.310699999332428,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.0877000018954277,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12292","display_name":"Graph Theory and Algorithms","score":0.08290000259876251,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.3815000057220459},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.37450000643730164},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.29829999804496765},{"id":"https://openalex.org/keywords/anonymity","display_name":"Anonymity","score":0.2897000014781952},{"id":"https://openalex.org/keywords/privacy-protection","display_name":"Privacy protection","score":0.26570001244544983}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5428000092506409},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4607999920845032},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.3815000057220459},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.37450000643730164},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.37450000643730164},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.32330000400543213},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.29829999804496765},{"id":"https://openalex.org/C178005623","wikidata":"https://www.wikidata.org/wiki/Q308859","display_name":"Anonymity","level":2,"score":0.2897000014781952},{"id":"https://openalex.org/C3017597292","wikidata":"https://www.wikidata.org/wiki/Q25052250","display_name":"Privacy protection","level":2,"score":0.26570001244544983},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.24529999494552612}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.18653/v1/2026.findings-acl.899","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.findings-acl.899","pdf_url":"https://aclanthology.org/2026.findings-acl.899.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2026","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.18653/v1/2026.findings-acl.899","is_oa":true,"landing_page_url":"https://doi.org/10.18653/v1/2026.findings-acl.899","pdf_url":"https://aclanthology.org/2026.findings-acl.899.pdf","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: ACL 2026","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G125128811","display_name":null,"funder_award_id":"W911NF-2110198","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G1432373144","display_name":null,"funder_award_id":"W911NF-21-1-","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G7452299184","display_name":null,"funder_award_id":"W911NF","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"}],"funders":[{"id":"https://openalex.org/F4320307791","display_name":"Cisco Systems","ror":"https://ror.org/03yt1ez60"},{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7166864397.pdf","grobid_xml":"https://content.openalex.org/works/W7166864397.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Retrieval-Augmented":[0],"Generation":[1],"(RAG)":[2],"is":[3],"a":[4,90,129],"powerful":[5],"technique":[6],"for":[7,143],"enhancing":[8],"Large":[9],"Language":[10],"Models":[11],"(LLMs)":[12],"with":[13],"external,":[14],"up-todate":[15],"knowledge.Graph":[16],"RAG":[17,61,95,139],"has":[18],"emerged":[19],"as":[20,83],"an":[21],"advanced":[22],"paradigm":[23],"that":[24],"leverages":[25],"graph-based":[26],"knowledge":[27],"structures":[28],"to":[29,43,70,74,107,121],"provide":[30],"more":[31,105,145],"coherent":[32],"and":[33,64,79,85,113,140],"contextually":[34],"rich":[35],"answers.However,":[36],"the":[37,54,59,108,133],"move":[38],"from":[39],"plain":[40],"document":[41],"retrieval":[42],"structured":[44,80,111],"graph":[45],"traversal":[46],"introduces":[47],"new,":[48],"underexplored":[49],"privacy":[50,135],"risks.This":[51],"paper":[52],"investigates":[53],"data":[55,67],"extraction":[56,68,109],"vulnerabilities":[57],"of":[58,110,132],"Graph":[60,94,138],"systems.We":[62],"design":[63],"execute":[65],"tailored":[66],"attacks":[69],"probe":[71],"their":[72,86],"susceptibility":[73],"leaking":[75],"both":[76],"raw":[77,99],"text":[78,100],"data,":[81],"such":[82],"entities":[84],"relationships.Our":[87],"findings":[88],"reveal":[89],"critical":[91],"trade-off:":[92],"while":[93],"systems":[96],"may":[97],"reduce":[98],"leakage,":[101],"they":[102],"are":[103],"significantly":[104],"vulnerable":[106],"entity":[112],"relationship":[114],"information.We":[115],"also":[116],"explore":[117],"potential":[118],"defense":[119],"mechanisms":[120],"mitigate":[122],"these":[123],"novel":[124],"attack":[125],"surfaces.This":[126],"work":[127],"provides":[128],"foundational":[130],"analysis":[131],"unique":[134],"challenges":[136],"in":[137],"offers":[141],"insights":[142],"building":[144],"secure":[146],"systems.":[147]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-08-08T01:25:22.217667","created_date":"2026-07-02T00:00:00"}