{"id":"https://openalex.org/W7162758640","doi":"https://doi.org/10.48550/arxiv.2605.29224","title":"Relevance as a Vulnerability: How Web Retrieval Degrades Safety Alignment in LLM Agents","display_name":"Relevance as a Vulnerability: How Web Retrieval Degrades Safety Alignment in LLM Agents","publication_year":2026,"publication_date":"2026-05-28","ids":{"openalex":"https://openalex.org/W7162758640","doi":"https://doi.org/10.48550/arxiv.2605.29224"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.29224","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.29224","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.29224","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5094079084","display_name":"Aditya Nawal","orcid":"https://orcid.org/0009-0008-5700-7146"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nawal, Aditya","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130354572","display_name":"Manit Baser","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Baser, Manit","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5137344097","display_name":"Mohan Gurusamy","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gurusamy, Mohan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.35420000553131104,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.35420000553131104,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.09149999916553497,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10286","display_name":"Information Retrieval and Search Behavior","score":0.06599999964237213,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/relevance","display_name":"Relevance (law)","score":0.7979999780654907},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.7907999753952026},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.5374000072479248},{"id":"https://openalex.org/keywords/data-retrieval","display_name":"Data retrieval","score":0.3635999858379364},{"id":"https://openalex.org/keywords/compliance","display_name":"Compliance (psychology)","score":0.32510000467300415},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.3068000078201294}],"concepts":[{"id":"https://openalex.org/C158154518","wikidata":"https://www.wikidata.org/wiki/Q7310970","display_name":"Relevance (law)","level":2,"score":0.7979999780654907},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.7907999753952026},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7271999716758728},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5374000072479248},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.5205000042915344},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4415000081062317},{"id":"https://openalex.org/C551230270","wikidata":"https://www.wikidata.org/wiki/Q4368942","display_name":"Data retrieval","level":2,"score":0.3635999858379364},{"id":"https://openalex.org/C2781460075","wikidata":"https://www.wikidata.org/wiki/Q1399332","display_name":"Compliance (psychology)","level":2,"score":0.32510000467300415},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.3068000078201294},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2867000102996826},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.2806999981403351},{"id":"https://openalex.org/C2776252893","wikidata":"https://www.wikidata.org/wiki/Q1364836","display_name":"FLEX","level":2,"score":0.2646999955177307},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.2513999938964844},{"id":"https://openalex.org/C61797465","wikidata":"https://www.wikidata.org/wiki/Q1188986","display_name":"Term (time)","level":2,"score":0.25119999051094055}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.29224","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.29224","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.29224","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.29224","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.6682810187339783}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"AI":[0],"agents":[1,43,173],"augment":[2],"large":[3],"language":[4],"models":[5],"with":[6,46,171,208],"external":[7,20],"tools":[8],"such":[9,118],"as":[10,119,146],"web":[11],"retrieval,":[12],"enabling":[13,40],"grounded":[14],"and":[15,76,93,161],"up-to-date":[16],"responses.":[17],"However,":[18],"incorporating":[19],"content":[21,105],"into":[22,72],"the":[23,28,73,77,80,84,104,109,137],"generation":[24,95],"pipeline":[25,75,169],"can":[26,126],"weaken":[27],"safety":[29,58],"alignment":[30],"mechanisms":[31],"that":[32,39,89,143],"govern":[33],"model":[34],"outputs.":[35,102],"Prior":[36],"work":[37],"shows":[38],"retrieval":[41,69,187],"in":[42,60,96],"increases":[44],"compliance":[45,129,163],"harmful":[47,101,128,162,210],"requests.":[48],"We":[49,198],"introduce":[50,199],"AgentREVEAL,":[51],"a":[52,97,147,192,201],"diagnostic":[53],"framework":[54,64],"for":[55,151,195],"analyzing":[56],"retrieval-induced":[57],"degradation":[59],"LLM":[61],"agents.":[62,197],"The":[63],"examines":[65],"two":[66],"axes:":[67],"how":[68],"is":[70,183],"integrated":[71],"agent":[74],"properties":[78],"of":[79,133],"retrieved":[81],"content.":[82],"Along":[83,103],"integration":[85],"axis,":[86,106],"we":[87,107,141],"find":[88],"binding":[90],"tool":[91],"invocation":[92],"response":[94],"single":[98],"step":[99],"amplifies":[100],"uncover":[108],"Safe":[110],"Source":[111],"Paradox:":[112],"even":[113],"oppositional":[114],"or":[115,123],"safety-oriented":[116],"sources,":[117],"pages":[120],"containing":[121,203],"warnings":[122],"risk":[124],"disclaimers,":[125],"increase":[127],"by":[130],"an":[131],"average":[132],"25%":[134],"compared":[135],"to":[136,212],"no-retrieval":[138],"baseline.":[139],"Finally,":[140],"show":[142],"relevance":[144,182],"acts":[145],"shared":[148],"activation":[149],"condition":[150],"both":[152],"vulnerabilities.":[153],"Similar":[154],"patterns":[155],"appear":[156],"on":[157],"frontier":[158],"closed":[159],"models,":[160],"remains":[164],"elevated":[165],"under":[166,178],"several":[167],"representative":[168],"interventions,":[170],"some":[172],"also":[174,184],"entering":[175],"this":[176],"regime":[177],"autonomous":[179],"retrieval.":[180],"Because":[181],"what":[185],"makes":[186],"useful,":[188],"these":[189],"results":[190],"expose":[191],"safety-utility":[193],"trade-off":[194],"retrieval-enabled":[196],"HarmURLBench,":[200],"benchmark":[202],"1,405":[204],"real-world":[205],"URLs":[206],"paired":[207],"320":[209],"behaviors":[211],"support":[213],"future":[214],"evaluations.":[215]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-30T00:00:00"}
