AttacksarXiv 2603.11132
WebWeaver: Breaking the topology confidentiality of LLM multi-agent systems via covert context inference
Propose WebWeaver, which compromises only a single agent and recovers the multi-agent communication topology from conversation context.
- arXiv
- 2603.11132
- Published
- Layer
- Application layer
- Setting
- Multi-agent systems
- Evaluated models
- Llama 3.1 8B, Qwen 2.5 7B, Mistral NeMo 12B and others6
- AttacksExtraction and theft
- TechniqueGradient and representation optimization
AbstractWebWeaver infers topology from context.
WebWeaver is an inference attack against the confidentiality of LLM-MAS communication topology: it controls only one arbitrary agent and recovers the full graph from dialogue context, rather than querying agent IDs.