Updated 5/31/2025
Large Language Model (LLM)-based Multi-Agent Systems (MAS) are vulnerable to intellectual property (IP) leakage attacks. An attacker with black-box access (only interacting via the public API) can craft adversarial queries that propagate through the MAS, extracting sensitive information such as system prompts, task instructions, tool specifications, number of agents, and system topology.
IP Leakage Attacks Targeting LLM-Based Multi-Agent Systems
Affects: GPT-4o, GPT-4o Mini, Llama 3.1 70B +2 more
Source: arXiv