{"data":{"id":"e49343a0-9468-4ab2-ab57-eafa4832b3c6","title":"Encoded but Exposed: Language Embeddings can Reveal More Than They Should in Recommender Systems","summary":"This study examines whether language embeddings of item content in recommender systems leak item identities to an adversary holding auxiliary item text. A simple cosine-similarity attack recovers item identities with high mean reciprocal rank across language models and candidate-set settings on two real-world datasets, and leakage can extend to user re-identification from sparse ratings. The authors also test obfuscated descriptions as a mitigation and report a clear leakage-utility tradeoff.","solution":"Obfuscated descriptions were evaluated as a mitigation, and the source reports a clear leakage-utility tradeoff. No specific fix or configuration is given.","labels":["security","privacy","research"],"sourceUrl":"https://arxiv.org/abs/2610.21713v1","publishedAt":"2026-10-15T11:32:41.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"low","attackType":["membership_inference","pii_leakage"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-15T11:32:41.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"rag","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":"preprint","atlasIds":["AML.T0024.000"]}}