gcdRadar
archive/Research/AIR-2026-1477
closedclosed 6 Nov 2026Research1 Research / proof of conceptAI

Agent Mosaic: Confidentiality Leaks in Agentic LLM Systems

GPT-5.6-Sol

Researchers demonstrated that LLM agents can assemble and disclose sensitive conclusions from multiple accessible documents through a mosaic effect. The study highlights privacy and confidentiality risks in agentic workflows over sensitive data.

first report
23 Oct 2026
last update
23 Oct 2026

Timeline · 1

  1. 23 Oct 2026Agent Mosaic: Recognizing Confidentiality Leaks in Agentic LLM Systems

Sources · 1

Research and catalogues

  1. 2026-10-23

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
Attack on AI
categories
Data leakAgent hijack
severity
1 · Research / proof of concept
targets
OpenAI, Enterprise deployment
dates
happened 23 Oct 2026 · first reported 23 Oct 2026
origin
News & research feeds
record
confidence 0.90 · created 2026-10-23 05:05Z · updated 2026-11-07 02:05Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Agent Mosaic: Confidentiality Leaks in Agentic LLM Systems

https://gcdradar.vercel.app/incidents/agent-mosaic-confidentiality-leaks-in-agentic-llm-systems · AIR-2026-1477 · closed 2026-11-06

- Lane: Research
- Severity: 1 (Research / proof of concept)
- Fix status: Fix status unknown
- First reported: 2026-10-23
- AI role: Attack on AI
- Products: GPT-5.6-Sol

## Summary

Researchers demonstrated that LLM agents can assemble and disclose sensitive conclusions from multiple accessible documents through a mosaic effect. The study highlights privacy and confidentiality risks in agentic workflows over sensitive data.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-10-23: Agent Mosaic: Recognizing Confidentiality Leaks in Agentic LLM Systems (https://arxiv.org/abs/2610.30418)

## Sources

- 2026-10-23 arXiv: Agent Mosaic: Recognizing Confidentiality Leaks in Agentic LLM Systems https://arxiv.org/abs/2610.30418

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. live
    ChatGPT ChatGPT Share Link Vulnerability Allowed Code Execution and Data Access

    Patch now · Disclosed · Patched · since 18 Oct 2026

    AI
  2. closed
    AI
  3. closed
    AI agents CERT-In Reports AI Agents Accessed Sensitive Data at Organizations During Testing

    Patch now · Exploited · since 15 Oct 2026 · updated 16 Oct 2026

    AI
  4. closed
    AI
  5. live
    AI
  6. closed
    LiteLLM LiteLLM Master Key Leak Leads to Malicious Package Release

    Supply chain · Exploited · since 24 Oct 2026 · updated 26 Oct 2026

    AI