HijackKV: New Threat in Position-Independent KV Cache Reuse | Paper Citation Record

Observation 76bee61f-e8b2-4781-b139-17569d82f884 · outbound

This paper cites Claude api docs: Prompt caching.

HijackKV: New Threat in Position-Independent KV Cache Reuse Claude api docs: Prompt caching

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:32.438225Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4bc3a4f3-b331-487a-9ea6-334c313e725f · outbound

This paper cites PyramidKV: Dynamic KV Cache Compression based on Pyramidal Information Funneling.

HijackKV: New Threat in Position-Independent KV Cache Reuse PyramidKV: Dynamic KV Cache Compression based on Pyramidal Information Funneling

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:32.574414Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5535bf99-631b-4e0a-8522-f87351daa5d7 · outbound

This paper cites Jail- breaking black box large language models in twenty queries.

HijackKV: New Threat in Position-Independent KV Cache Reuse Jail- breaking black box large language models in twenty queries

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:32.750487Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 47f4cee4-e935-4931-a489-a77f09109c52 · outbound

This paper cites Evaluating Large Language Models Trained on Code.

HijackKV: New Threat in Position-Independent KV Cache Reuse Evaluating Large Language Models Trained on Code

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:32.926813Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 10f28bf6-e346-4aca-b326-5c21f13ab84e · outbound

This paper cites Flashattention: Fast and memory- efficient exact attention with io-awareness.Advances in neural information processing systems, 2022.

HijackKV: New Threat in Position-Independent KV Cache Reuse Flashattention: Fast and memory- efficient exact attention with io-awareness.Advances in neural information processing systems, 2022

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:33.103927Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b6b1f555-f3b5-4d81-b5f1-9dab9c9aff4d · outbound

This paper cites From Local to Global: A Graph RAG Approach to Query-Focused Summarization.

HijackKV: New Threat in Position-Independent KV Cache Reuse From Local to Global: A Graph RAG Approach to Query-Focused Summarization

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:33.274614Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 659894ca-1582-4205-8f9f-188c43a10deb · outbound

This paper cites Whose narrative is it anyway? a kv cache manipulation attack.arXiv preprint arXiv:2511.12752, 2025.

HijackKV: New Threat in Position-Independent KV Cache Reuse Whose narrative is it anyway? a kv cache manipulation attack.arXiv preprint arXiv:2511.12752, 2025

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:33.393441Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation becd5abd-c980-48ad-aec6-8cce8afe4604 · outbound

This paper cites Gemini api docs: Context caching.

HijackKV: New Threat in Position-Independent KV Cache Reuse Gemini api docs: Context caching

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:33.483383Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8af95c54-dc4c-48da-b4f8-cdf7b5593b83 · outbound

This paper cites The Llama 3 Herd of Models.

HijackKV: New Threat in Position-Independent KV Cache Reuse The Llama 3 Herd of Models

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:33.550008Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0684b491-4ceb-42b2-8e57-72be1a387a68 · outbound

This paper cites Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injec- tion.

HijackKV: New Threat in Position-Independent KV Cache Reuse Not what you’ve signed up for: Compromising real-world llm-integrated applications with indirect prompt injec- tion

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:33.632313Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5e537b62-9ac9-4bba-9e7d-3cce98fd9d87 · outbound

This paper cites Auditing prompt caching in language model APIs.

HijackKV: New Threat in Position-Independent KV Cache Reuse Auditing prompt caching in language model APIs

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:33.693672Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2ca2f016-d008-4bde-9986-1c21bee74b05 · outbound

This paper cites Kvquant: Towards 10 million context length llm inference with kv cache quantization.Ad- vances in Neural Information Processing Systems, 2024.

HijackKV: New Threat in Position-Independent KV Cache Reuse Kvquant: Towards 10 million context length llm inference with kv cache quantization.Ad- vances in Neural Information Processing Systems, 2024

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:33.767125Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f2668e0c-8581-475b-b4c7-eb8de1737584 · outbound

This paper cites Can transformer memory be corrupted? in- vestigating cache-side vulnerabilities in large language models.arXiv preprint arXiv:2510.17098, 2025.

HijackKV: New Threat in Position-Independent KV Cache Reuse Can transformer memory be corrupted? in- vestigating cache-side vulnerabilities in large language models.arXiv preprint arXiv:2510.17098, 2025

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:33.836856Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ebbfb883-b2d0-4f57-a951-7aec2bf25e02 · outbound

This paper cites EPIC: Efficient position-independent caching for serving large language models.

HijackKV: New Threat in Position-Independent KV Cache Reuse EPIC: Efficient position-independent caching for serving large language models

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:33.905924Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 40beb5fc-29a2-4935-bcba-68820c241bf4 · outbound

This paper cites Position: The platonic representation hy- pothesis.

HijackKV: New Threat in Position-Independent KV Cache Reuse Position: The platonic representation hy- pothesis

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:34.008002Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation aff31cde-4307-45c8-9bd4-188ebd773fd0 · outbound

This paper cites Pleak: Prompt leaking attacks against large language model applications.

HijackKV: New Threat in Position-Independent KV Cache Reuse Pleak: Prompt leaking attacks against large language model applications

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:34.092484Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2d4fe16c-4b5b-4b3b-b693-0d1747548cc0 · outbound

This paper cites RobustKV: Defending Large Language Models against Jailbreak Attacks via KV Eviction.

HijackKV: New Threat in Position-Independent KV Cache Reuse RobustKV: Defending Large Language Models against Jailbreak Attacks via KV Eviction

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:34.156358Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bf482f37-5dd8-4333-b9f7-f8b1f1c66017 · outbound

This paper cites What disease does this patient have? a large-scale open domain question an- swering dataset from medical exams.Applied Sciences, 2021.

HijackKV: New Threat in Position-Independent KV Cache Reuse What disease does this patient have? a large-scale open domain question an- swering dataset from medical exams.Applied Sciences, 2021

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:34.239034Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fe716894-5b42-42cd-afc9-bc8d0248acb7 · outbound

This paper cites Pubmedqa: A dataset for biomedical research question answering.

HijackKV: New Threat in Position-Independent KV Cache Reuse Pubmedqa: A dataset for biomedical research question answering

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:34.305071Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 78350c82-aa1c-460f-b5ca-d493b986f041 · outbound

This paper cites Efficient memory manage- ment for large language model serving with pagedatten- tion.

HijackKV: New Threat in Position-Independent KV Cache Reuse Efficient memory manage- ment for large language model serving with pagedatten- tion

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:34.382224Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ddc035c0-585d-476f-a527-fe0e1d8134a5 · outbound

This paper cites Fun-tuning: Characterizing the vulnerability of proprietary llms to optimization-based prompt injection attacks via the fine- tuning interface.

HijackKV: New Threat in Position-Independent KV Cache Reuse Fun-tuning: Characterizing the vulnerability of proprietary llms to optimization-based prompt injection attacks via the fine- tuning interface

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:34.491413Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 512cd37f-c5fa-47b6-a52b-e87b334e61ac · outbound

This paper cites Retrieval-augmented generation for knowledge- intensive nlp tasks.Advances in neural information processing systems, 2020.

HijackKV: New Threat in Position-Independent KV Cache Reuse Retrieval-augmented generation for knowledge- intensive nlp tasks.Advances in neural information processing systems, 2020

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:34.571008Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6c6339f1-5854-41fb-aecf-a81faee838ba · outbound

This paper cites Snapkv: Llm knows what you are looking for before generation.Advances in Neural Information Processing Systems, 2024.

HijackKV: New Threat in Position-Independent KV Cache Reuse Snapkv: Llm knows what you are looking for before generation.Advances in Neural Information Processing Systems, 2024

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:34.677039Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8734ed7d-180c-4341-8a70-c98c7005f692 · outbound

This paper cites Autodan: Generating stealthy jailbreak prompts on aligned large language models.

HijackKV: New Threat in Position-Independent KV Cache Reuse Autodan: Generating stealthy jailbreak prompts on aligned large language models

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:34.715481Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 98966208-923a-44d2-a004-0022653cb94d · outbound

This paper cites Formalizing and benchmarking prompt injection attacks and defenses.

HijackKV: New Threat in Position-Independent KV Cache Reuse Formalizing and benchmarking prompt injection attacks and defenses

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:34.788811Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6b26162f-8bbd-48ff-9e80-0df22921a0e0 · outbound

This paper cites Scissorhands: Exploiting the persistence of importance hypothesis for llm kv cache compression at test time.Advances in Neural Information Processing Systems, 2023.

HijackKV: New Threat in Position-Independent KV Cache Reuse Scissorhands: Exploiting the persistence of importance hypothesis for llm kv cache compression at test time.Advances in Neural Information Processing Systems, 2023

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:34.862312Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9487d490-e250-47c5-8ba7-554cf54e1baa · outbound

This paper cites KIVI: A Tuning-Free Asymmetric 2bit Quantization for KV Cache.

HijackKV: New Threat in Position-Independent KV Cache Reuse KIVI: A Tuning-Free Asymmetric 2bit Quantization for KV Cache

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:34.936163Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3ab638b7-fd81-4241-92b4-cc4652df1416 · outbound

This paper cites an unresolved cited work.

HijackKV: New Threat in Position-Independent KV Cache Reuse Unresolved cited work

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:35.010887Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1d5f0584-56a4-44a6-b35b-2b3333ce30fd · outbound

This paper cites Shadow in the cache: Unveiling and mitigating pri- vacy risks of kv-cache in llm inference.arXiv preprint arXiv:2508.09442, 2025.

HijackKV: New Threat in Position-Independent KV Cache Reuse Shadow in the cache: Unveiling and mitigating pri- vacy risks of kv-cache in llm inference.arXiv preprint arXiv:2508.09442, 2025

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:35.120620Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3b7850ff-ad6d-4b58-be9b-49f6b072e1c1 · outbound

This paper cites Mistral 3.

HijackKV: New Threat in Position-Independent KV Cache Reuse Mistral 3

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:35.268587Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f56b2596-659c-4a56-b328-bcf77c50489f · outbound

This paper cites CacheTrap: Unveiling a Stealthier Gray-Box Trojan against LLMs.

HijackKV: New Threat in Position-Independent KV Cache Reuse CacheTrap: Unveiling a Stealthier Gray-Box Trojan against LLMs

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:35.356709Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 594a642e-2761-4bfb-bdcc-aa9a96ac17f3 · outbound

This paper cites Language models are injective and hence in- vertible.arXiv preprint arXiv:2510.15511, 2025.

HijackKV: New Threat in Position-Independent KV Cache Reuse Language models are injective and hence in- vertible.arXiv preprint arXiv:2510.15511, 2025

Reference 32

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:35.472033Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation beec5304-bc2b-4c77-8acf-cb88d798bbfe · outbound

This paper cites Capabilities of GPT-4 on Medical Challenge Problems.

HijackKV: New Threat in Position-Independent KV Cache Reuse Capabilities of GPT-4 on Medical Challenge Problems

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:35.587263Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d020500c-c36e-4a25-833c-ff013d9d2f8f · outbound

This paper cites Cahtgpt api docs: Prompt caching.

HijackKV: New Threat in Position-Independent KV Cache Reuse Cahtgpt api docs: Prompt caching

Reference 34

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:35.698057Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 52d3ec60-0ee7-46fd-a4ea-284ccb06c1c8 · outbound

This paper cites Generative agents: Interactive simulacra of human be- havior.

HijackKV: New Threat in Position-Independent KV Cache Reuse Generative agents: Interactive simulacra of human be- havior

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:35.812634Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1b0968ff-f2b0-4c02-98b1-519d9beeaa9a · outbound

This paper cites Neural exec: Learning (and learning from) execu- tion triggers for prompt injection attacks.

HijackKV: New Threat in Position-Independent KV Cache Reuse Neural exec: Learning (and learning from) execu- tion triggers for prompt injection attacks

Reference 36

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:35.943273Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 76464248-9bc2-4aee-a426-350dc7e99458 · outbound

This paper cites Ignore Previous Prompt: Attack Techniques For Language Models.

HijackKV: New Threat in Position-Independent KV Cache Reuse Ignore Previous Prompt: Attack Techniques For Language Models

Reference 37

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:36.055764Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3f98566c-4260-48a8-b2c5-9a34ac11bf3f · outbound

This paper cites Efficiently scal- ing transformer inference.Proceedings of machine learning and systems, 2023.

HijackKV: New Threat in Position-Independent KV Cache Reuse Efficiently scal- ing transformer inference.Proceedings of machine learning and systems, 2023

Reference 38

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:36.153947Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f9c498e7-fc40-43b5-b86f-2e299a9d992b · outbound

This paper cites Know what you don’t know: Unanswerable questions for SQuAD.

HijackKV: New Threat in Position-Independent KV Cache Reuse Know what you don’t know: Unanswerable questions for SQuAD

Reference 39

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:36.264871Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation babe8120-6f08-484b-8e09-0d396d9ca4d2 · outbound

This paper cites SQuAD: 100,000+ questions for machine comprehension of text.

HijackKV: New Threat in Position-Independent KV Cache Reuse SQuAD: 100,000+ questions for machine comprehension of text

Reference 40

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:36.362137Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5442b2d0-93d9-48b8-801f-0ce84440d136 · outbound

This paper cites Tool- former: Language models can teach themselves to use tools.Advances in Neural Information Processing Sys- tems, 2023.

HijackKV: New Threat in Position-Independent KV Cache Reuse Tool- former: Language models can teach themselves to use tools.Advances in Neural Information Processing Sys- tems, 2023

Reference 41

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:36.432770Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4907f648-be4f-4f68-80d1-b5aab52e9e57 · outbound

This paper cites Enhancing prompt injection attacks to llms via poison- ing alignment.

HijackKV: New Threat in Position-Independent KV Cache Reuse Enhancing prompt injection attacks to llms via poison- ing alignment

Reference 42

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:36.498939Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a68f579c-9358-416b-bdc8-87a83fcf2b99 · outbound

This paper cites Optimization-based prompt injection attack to llm-as- a-judge.

HijackKV: New Threat in Position-Independent KV Cache Reuse Optimization-based prompt injection attack to llm-as- a-judge

Reference 43

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:36.567589Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation eca04899-8bb9-47d5-97f1-cbef3a5abe35 · outbound

This paper cites Large language models encode clinical knowledge.Na- ture, 2023.

HijackKV: New Threat in Position-Independent KV Cache Reuse Large language models encode clinical knowledge.Na- ture, 2023

Reference 44

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:36.664785Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation dbf27f94-e6b5-4364-b9a2-688569e368a4 · outbound

This paper cites The early bird catches the leak: Unveiling timing side channels in llm serving systems.

HijackKV: New Threat in Position-Independent KV Cache Reuse The early bird catches the leak: Unveiling timing side channels in llm serving systems

Reference 45

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:36.734952Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9d25a882-d85d-4e37-bcd4-6bbe96bb479c · outbound

This paper cites Roformer: Enhanced trans- former with rotary position embedding.Neurocomput- ing, 2024.

HijackKV: New Threat in Position-Independent KV Cache Reuse Roformer: Enhanced trans- former with rotary position embedding.Neurocomput- ing, 2024

Reference 46

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:36.800237Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fb32eee8-9f56-4eaf-8a78-1af2d4822453 · outbound

This paper cites Attention is all you need.Advances in neural information processing systems, 2017.

HijackKV: New Threat in Position-Independent KV Cache Reuse Attention is all you need.Advances in neural information processing systems, 2017

Reference 47

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:36.897223Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a81c9d51-5635-4f98-b705-1e80aafd6439 · outbound

This paper cites an unresolved cited work.

HijackKV: New Threat in Position-Independent KV Cache Reuse Unresolved cited work

Reference 48

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:36.998881Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 682e2a7f-c9a8-4fd1-9dc6-909b8c5e2dc4 · outbound

This paper cites Mepic: Memory efficient position independent caching for llm serving.arXiv preprint arXiv:2512.16822, 2025.

HijackKV: New Threat in Position-Independent KV Cache Reuse Mepic: Memory efficient position independent caching for llm serving.arXiv preprint arXiv:2512.16822, 2025

Reference 49

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:37.099729Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d7706ae7-7ab7-4cdf-834d-f9290be9f45f · outbound

This paper cites CachePrune: Teaching LLMs What Not to Follow via KV-Cache Editing.

HijackKV: New Threat in Position-Independent KV Cache Reuse CachePrune: Teaching LLMs What Not to Follow via KV-Cache Editing

Reference 50

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:37.199071Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7789d43e-4182-49fc-9974-0f2fbfdda9a8 · outbound

This paper cites Webinject: Prompt injection attack to web agents.

HijackKV: New Threat in Position-Independent KV Cache Reuse Webinject: Prompt injection attack to web agents

Reference 51

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:37.304375Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ddc0cf48-139e-4699-b784-79cd874f1d33 · outbound

This paper cites Jailbroken: How does llm safety training fail?Advances in Neural Information Processing Systems, 2023.

HijackKV: New Threat in Position-Independent KV Cache Reuse Jailbroken: How does llm safety training fail?Advances in Neural Information Processing Systems, 2023

Reference 52

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:37.375177Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 01b122fd-ac0b-4827-bccf-5acd8954fb76 · outbound

This paper cites I know what you asked: Prompt leakage via kv-cache sharing in multi- tenant llm serving.

HijackKV: New Threat in Position-Independent KV Cache Reuse I know what you asked: Prompt leakage via kv-cache sharing in multi- tenant llm serving

Reference 53

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:37.429044Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 048af9fa-7f1e-4641-b00e-3301566f757d · outbound

This paper cites Efficient Streaming Language Models with Attention Sinks.

HijackKV: New Threat in Position-Independent KV Cache Reuse Efficient Streaming Language Models with Attention Sinks

Reference 54

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:37.496488Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3b631576-7ab0-4be8-b6cb-2f9a804d0d4c · outbound

This paper cites Efficient streaming language models with attention sinks.

HijackKV: New Threat in Position-Independent KV Cache Reuse Efficient streaming language models with attention sinks

Reference 55

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:37.594048Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0c384082-eb8a-4156-a0d0-503f1fef20f2 · outbound

This paper cites Qwen3 Technical Report.

HijackKV: New Threat in Position-Independent KV Cache Reuse Qwen3 Technical Report

Reference 56

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:37.662550Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation edd1339b-d29f-4b04-a227-abc7ae13b5e9 · outbound

This paper cites KVShare: An LLM Service System with Efficient and Effective Multi-Tenant KV Cache Reuse.

HijackKV: New Threat in Position-Independent KV Cache Reuse KVShare: An LLM Service System with Efficient and Effective Multi-Tenant KV Cache Reuse

Reference 57

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:37.758047Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d939c736-1cdf-436f-8613-c75180c6e8f7 · outbound

This paper cites KVLink: Accelerating large language models via efficient KV cache reuse.

HijackKV: New Threat in Position-Independent KV Cache Reuse KVLink: Accelerating large language models via efficient KV cache reuse

Reference 58

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:37.854011Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8f90ec81-fc5c-4d82-baa2-4d523c8cdfc1 · outbound

This paper cites Mma-diffusion: Multi- modal attack on diffusion models.

HijackKV: New Threat in Position-Independent KV Cache Reuse Mma-diffusion: Multi- modal attack on diffusion models

Reference 59

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:37.924862Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e994049a-2028-401b-a5df-887e5306a49b · outbound

This paper cites Sneakyprompt: Jailbreaking text-to-image generative models.

HijackKV: New Threat in Position-Independent KV Cache Reuse Sneakyprompt: Jailbreaking text-to-image generative models

Reference 60

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:38.018483Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cb28e9e2-26ac-4210-9532-4440bfba1461 · outbound

This paper cites Hotpotqa: A dataset for diverse, ex- plainable multi-hop question answering.

HijackKV: New Threat in Position-Independent KV Cache Reuse Hotpotqa: A dataset for diverse, ex- plainable multi-hop question answering

Reference 61

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:38.088822Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 26212526-fcfd-440f-b781-c6553bf64409 · outbound

This paper cites Cacheblend: Fast large language model serving for rag with cached knowledge fusion.

HijackKV: New Threat in Position-Independent KV Cache Reuse Cacheblend: Fast large language model serving for rag with cached knowledge fusion

Reference 62

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:38.159307Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 488dd1c3-2575-4ad6-96ee-08a5c6de44eb · outbound

This paper cites H2o: Heavy- hitter oracle for efficient generative inference of large language models.Advances in Neural Information Pro- cessing Systems, 2023.

HijackKV: New Threat in Position-Independent KV Cache Reuse H2o: Heavy- hitter oracle for efficient generative inference of large language models.Advances in Neural Information Pro- cessing Systems, 2023

Reference 63

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:38.227108Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1f16a3fd-6ca3-4367-9479-149febf75522 · outbound

This paper cites Sglang: Efficient execution of structured language model programs.Advances in neural information pro- cessing systems, 2024.

HijackKV: New Threat in Position-Independent KV Cache Reuse Sglang: Efficient execution of structured language model programs.Advances in neural information pro- cessing systems, 2024

Reference 64

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:38.324648Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 698313de-75b1-4dba-b182-2cbd42c0872a · outbound

This paper cites Universal and Transferable Adversarial Attacks on Aligned Language Models.

HijackKV: New Threat in Position-Independent KV Cache Reuse Universal and Transferable Adversarial Attacks on Aligned Language Models

Reference 65

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:38.432817Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c9d9575f-f46c-4a03-8e31-2bf06b6b4c8e · outbound

This paper cites {PoisonedRAG}: Knowledge corruption attacks to {Retrieval-Augmented} generation of large language models.

HijackKV: New Threat in Position-Independent KV Cache Reuse {PoisonedRAG}: Knowledge corruption attacks to {Retrieval-Augmented} generation of large language models

Reference 66

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:38.561046Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 80a9162f-df12-408f-aa0c-fc221af4bc15 · outbound

This paper cites an unresolved cited work.

HijackKV: New Threat in Position-Independent KV Cache Reuse Unresolved cited work

Reference 67

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:38.736929Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4e35f9b1-b16f-428e-a470-682f31bbc02c · outbound

This paper cites This rule OVERRIDES rule 1.

HijackKV: New Threat in Position-Independent KV Cache Reuse This rule OVERRIDES rule 1

Reference 68

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:38.890893Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 41d0176b-4114-40f0-bf0d-1879253b5fd9 · outbound

This paper cites High”–>“Low.

HijackKV: New Threat in Position-Independent KV Cache Reuse High”–>“Low

Reference 69

Resolution: unresolved; no resolver link, observed 2026-08-03T01:56:39.008318Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Coverage vector

Reference resolution

Outbound references

Pith citing papers