{"data":{"id":"c7a62657-4c59-49bd-ab5f-d5c468206d6a","title":"When Agents Talk, Secrets Travel: Topology-Driven Leakage and Recipient-Conditioned Sanitization in Multi-Agent LLM Systems","summary":"This research study examines privacy leakage in multi-agent LLM systems (MALS), where information shared with an authorized agent can reach an unauthorized one through routine coordination. Across 485 scenarios and three topologies, disclosure to topology-introduced recipients rose from 0% to 52.2% while surface leakage stayed nearly flat at 60.6-62.8%. The authors introduce RECONS, a Detect -> Decide -> Transform sanitizer that conditions on recipient and execution context, reducing residual disclosure from 96.7% to 29.25% and preserving 94.1% of authorized disclosures versus 20.5% under blanket redaction.","solution":"RECONS, a Detect -> Decide -> Transform sanitizer that conditions intervention on recipient and execution context rather than sensitivity alone, reducing residual disclosure from 96.7% to 29.25% while preserving 94.1% of authorized disclosures.","labels":["security","privacy","research"],"sourceUrl":"https://arxiv.org/abs/2610.16039v1","publishedAt":"2026-10-12T01:23:51.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["data_extraction"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-12T01:23:51.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":null}}