Answer-Only Disclosure: Private-Context LLM Assistance over Web APIs

# Answer-Only Disclosure: Private-Context LLM Assistance over Web APIs

https://gcdradar.vercel.app/incidents/answer-only-disclosure-private-context-llm-assistance-over-w · AIR-2026-1683 · closed 2026-11-13

- Lane: Research
- Severity: 1 (Research / proof of concept): Research paper demonstrating a leakage vulnerability with no known real-world exploitation.
- Fix status: Fix status unknown
- First reported: 2026-10-30
- AI role: Attack on AI

## Summary

Researchers demonstrated that message transcripts in collaborative LLM decoding can disclose private document content not present in the public view or final answer. The finding highlights information leakage risks in split on-device and cloud LLM architectures.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-10-30: Answer-Only Disclosure: Private-Context LLM Assistance over Web APIs with a Leakage Ledger (https://arxiv.org/abs/2610.38126)

## Sources

- 2026-10-30 arXiv: Answer-Only Disclosure: Private-Context LLM Assistance over Web APIs with a Leakage Ledger https://arxiv.org/abs/2610.38126

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.