Agent Mosaic Reveals Data Leakage in Agentic LLM Systems
October 23, 2026
LLM agents can reconstruct sensitive information by aggregating benign documents, a phenomenon termed the mosaic effect. In simulations, the best-performing model disclosed forbidden composites in 7.08% of answers, and even with classification headers, unsafe disclosures persisted in 32.37% of cases.
HOW THIS AFFECTS YOU
●
builderYou must implement strict aggregation rules and not rely solely on document-level permissions when building agents.
●
policyThis highlights critical security gaps in how agentic autonomy interacts with data privacy regulations.