{"id":"https://openalex.org/W7166733594","doi":"https://doi.org/10.48550/arxiv.2606.29788","title":"MemLeak: Diagnosing Information Leaks in Multimodal Agent Memory","display_name":"MemLeak: Diagnosing Information Leaks in Multimodal Agent Memory","publication_year":2026,"publication_date":"2026-06-29","ids":{"openalex":"https://openalex.org/W7166733594","doi":"https://doi.org/10.48550/arxiv.2606.29788"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.29788","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.29788","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.29788","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5139681330","display_name":"Kuan Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Kuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5139690164","display_name":"Chao Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Chao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.6154000163078308,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11714","display_name":"Multimodal Machine Learning Applications","score":0.6154000163078308,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.061900001019239426,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10775","display_name":"Generative Adversarial Networks and Image Synthesis","score":0.04830000177025795,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5231000185012817},{"id":"https://openalex.org/keywords/residual","display_name":"Residual","score":0.4641999900341034},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.43720000982284546},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.39070001244544983},{"id":"https://openalex.org/keywords/semantic-memory","display_name":"Semantic memory","score":0.3774000108242035},{"id":"https://openalex.org/keywords/encoding","display_name":"Encoding (memory)","score":0.35109999775886536},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.34279999136924744},{"id":"https://openalex.org/keywords/memory-leak","display_name":"Memory leak","score":0.32429999113082886}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7512000203132629},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5562999844551086},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5231000185012817},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.5008999705314636},{"id":"https://openalex.org/C155512373","wikidata":"https://www.wikidata.org/wiki/Q287450","display_name":"Residual","level":2,"score":0.4641999900341034},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.43720000982284546},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.39070001244544983},{"id":"https://openalex.org/C197914299","wikidata":"https://www.wikidata.org/wiki/Q18650","display_name":"Semantic memory","level":3,"score":0.3774000108242035},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.35109999775886536},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.34279999136924744},{"id":"https://openalex.org/C156731835","wikidata":"https://www.wikidata.org/wiki/Q751740","display_name":"Memory leak","level":4,"score":0.32429999113082886},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.32359999418258667},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.3176000118255615},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3075999915599823},{"id":"https://openalex.org/C133488467","wikidata":"https://www.wikidata.org/wiki/Q6673524","display_name":"Long short term memory","level":4,"score":0.3052999973297119},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.29910001158714294},{"id":"https://openalex.org/C119907115","wikidata":"https://www.wikidata.org/wiki/Q6815725","display_name":"Memory errors","level":3,"score":0.2879999876022339},{"id":"https://openalex.org/C178278151","wikidata":"https://www.wikidata.org/wiki/Q7936607","display_name":"Visual memory","level":3,"score":0.2872999906539917},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.27799999713897705},{"id":"https://openalex.org/C2985957978","wikidata":"https://www.wikidata.org/wiki/Q492","display_name":"Human memory","level":3,"score":0.27149999141693115},{"id":"https://openalex.org/C100660578","wikidata":"https://www.wikidata.org/wiki/Q18733","display_name":"Recall","level":2,"score":0.2702000141143799},{"id":"https://openalex.org/C5339829","wikidata":"https://www.wikidata.org/wiki/Q1425977","display_name":"Machine vision","level":2,"score":0.26100000739097595},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2500999867916107}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.29788","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.29788","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.29788","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.29788","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"When":[0],"a":[1,9,57,81,132],"multimodal":[2],"AI":[3],"agent":[4],"is":[5],"asked":[6],"to":[7,37,124],"forget":[8],"fact,":[10],"current":[11],"memory":[12,61,134],"systems":[13,88],"usually":[14],"delete":[15],"the":[16,25,52,121],"text":[17,94],"entry":[18],"and":[19,98,136],"report":[20],"success.":[21],"We":[22,50],"find":[23],"that":[24,59,69],"fact":[26],"can":[27],"remain":[28],"recoverable":[29],"from":[30],"retained":[31,92,99],"user":[32],"images,":[33],"including":[34],"images":[35,100],"tagged":[36],"entirely":[38],"different":[39],"facts,":[40],"because":[41],"VLMs":[42],"use":[43],"implicit":[44],"visual":[45],"cues":[46],"at":[47],"inference":[48],"time.":[49],"introduce":[51],"Information":[53],"Provenance":[54],"Graph":[55],"(IPG),":[56],"taxonomy":[58],"classifies":[60],"representations":[62],"by":[63],"deletion":[64,70,82,119],"affordance.":[65],"The":[66,126],"IPG":[67],"reveals":[68],"fails":[71],"through":[72],"multiple":[73,130],"channels.":[74],"Our":[75],"benchmark,":[76],"MemLeak,":[77],"measures":[78],"this":[79],"across":[80,129],"cascade:":[83],"direct":[84],"probing":[85],"of":[86,112],"deletion-capable":[87],"yields":[89],"<1%,":[90],"but":[91],"correlated":[93],"enables":[95],"18.3%":[96],"recovery,":[97],"enable":[101],"12.0%":[102],"recovery":[103],"(0.0%":[104],"blind":[105],"baseline,":[106],"0.3%":[107],"FPR)":[108],"--":[109],"with":[110],"47%":[111],"image":[113,122],"leaks":[114],"not":[115],"text-recoverable.":[116],"Content-aware":[117],"semantic":[118],"reduces":[120],"residual":[123,127],"2.0%.":[125],"appears":[128],"VLMs,":[131],"production":[133],"system,":[135],"real":[137],"Unsplash-licensed":[138],"photographs.":[139],"Dual-annotator":[140],"human":[141],"validation":[142],"(kappa":[143],"=":[144],"0.88)":[145],"confirms":[146],"judge":[147],"reliability.":[148]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-07-01T00:00:00"}