{"as_of":"2026-08-07T19:18:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:fe28e612ad3dbb632ad82df7adc91a2d218bf32740afbbf3740f6d9170db5d5d","coverage":[{"denominator":47,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":47,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:41:16.459420Z","state":"measured"},{"denominator":48,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":48,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-09T19:26:55.734521Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-11T15:41:47.100353Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"cited_work":{"arxiv_id":"2506.07399","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2506.07399","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Mrm: Black-box membership inference attacks against multimodal rag systems","venue":null,"work_id":"3ef36093-3d36-4d18-b326-5d6633c0946a","year":2025},"citing_paper":{"arxiv_id":"2605.00955","last_updated":"2026-05-01T12:30:00Z","snapshot_observed_at":"2026-07-06T23:14:15.780028Z","submitted_at":"2026-05-01T12:30:00Z","title":"E-MIA: Exam-Style Black-Box Membership Inference Attacks against RAG Systems","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-09T19:26:55.734521Z"},"links":{"cited_paper":"/paper/2506.07399","citing_paper":"/paper/2605.00955"},"observation_digest":"sha256:3ff9c436b2c404461f8fbe639606cf06972d792d732727d3747613cf3080028b","observation_id":"0eb5b435-c5ca-4bd4-b7d8-cde16c0803c2","resolution":{"observed_at":"2026-05-11T15:41:47.185281Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2506.07399/citation-record","integrity":"/paper/2506.07399/integrity","json":"/paper/2506.07399/citation-record.json","paper":"/paper/2506.07399"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.956054Z","title":"Murag: Multimodal retrieval-augmented generator for open question answering over images and text","venue":null,"work_id":"b71e1920-8e44-4e21-b0a7-56dd1369fd25","year":2022},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.283871Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:02c89a64f1feb552d02f6d7a4f4769e21975e9b3d28171c618d2b0b2439d2666","observation_id":"a4b2815a-4465-497d-9398-cf178574a618","resolution":{"observed_at":"2026-08-07T05:41:16.960180Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.944904Z","title":"Universal vision- language dense retrieval: Learning a unified representation space for multi-modal retrieval","venue":null,"work_id":"953173ff-9f23-4a58-9785-17ac6aecb4b4","year":2023},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.288055Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:a62984a18f4c92e622255c37f33eaa72447268bf5cfe7be0840e0d26958a9523","observation_id":"579cb9e4-ea10-49c1-a19b-c15c6b2bd290","resolution":{"observed_at":"2026-08-07T05:41:16.949119Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.934003Z","title":"Retrieval-augmented multimodal language modeling","venue":null,"work_id":"a0a27d3a-95a6-4ea8-9cd3-3bed7c897733","year":2023},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.292504Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:aa6bc82db2b9432d3e9376eba92055735f3ede2ac36c3fdc76bfd6e6ecc21bf9","observation_id":"b6a49158-9c9e-474f-b5ed-113848273381","resolution":{"observed_at":"2026-08-07T05:41:16.937659Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2202.10936","last_updated":"2022-07-16T01:27:59Z","snapshot_observed_at":"2026-07-06T12:40:27.042790Z","submitted_at":"2022-02-18T15:15:46Z","title":"A Survey of Vision-Language Pre-Trained Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.10936","snapshot_observed_at":"2026-08-07T05:41:16.296555Z","title":"A survey of vision-language pre-trained models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.296555Z"},"links":{"cited_paper":"/paper/2202.10936","citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:58d6c02f94fbe9bd71156ca96e2643b7344b18da303aa373ea9c7968e441df58","observation_id":"13e46ba8-bdfe-4e22-aea4-0dc4a23c42a9","resolution":{"observed_at":"2026-08-07T05:41:16.296555Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.922813Z","title":"Vision-language models for vision tasks: A survey","venue":null,"work_id":"48a02dd1-c8f4-48af-a409-f7efa276a3f1","year":2024},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.300789Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:bf875e6c724838e6001b0783411f34332dd32aff938b6bdf496c61cc6f986372","observation_id":"85693dc5-3bc2-4e2d-bd8f-c2de504a0877","resolution":{"observed_at":"2026-08-07T05:41:16.927057Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.911199Z","title":"In-context learning enables multimodal large language models to classify cancer pathology images","venue":null,"work_id":"9186feef-65cc-4feb-be05-2e7d58b3c9a9","year":2024},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.304597Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:ceecf93ca2e775cc0a9296ca72783735bb4bbc45bfd2d59401ae9888dca6e2ce","observation_id":"a82558ae-bf9f-46ab-a49f-a7795e71e698","resolution":{"observed_at":"2026-08-07T05:41:16.915685Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.900581Z","title":"Mmed-rag: Versatile multimodal rag system for medical vision language models","venue":null,"work_id":"676b3a77-44a6-446a-ae73-d48b70ef71ea","year":2024},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.308705Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:75dc46b40e76cdc226b1384971f0683debcb365fa2cc0f448275aaf57b2ecf4b","observation_id":"52b9463f-2d93-4527-9745-3365a66c5cd1","resolution":{"observed_at":"2026-08-07T05:41:16.904318Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.889482Z","title":"Rule: Reliable multimodal rag for factuality in medical vision language models","venue":null,"work_id":"ee9e52de-5edb-4b22-928c-e15efb0c0247","year":2024},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.312223Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:82a882037536def0986d80cff6cddadf1579e2e243b86b5435315dcdc1d517b8","observation_id":"e658a3f7-1241-4186-a596-e1cbf66a310a","resolution":{"observed_at":"2026-08-07T05:41:16.893220Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.315764Z","title":"Retrieval-augmented generation for knowledge-intensive nlp tasks","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.315764Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:433c14fdf329eac81a4ac2c17f39e3ddce186af722258e86eac8123757658075","observation_id":"bafa7270-0e8a-4cc4-8bf2-b8f2f0a4c7b5","resolution":{"observed_at":"2026-08-07T05:41:16.315764Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.06872","last_updated":"2025-02-08T06:50:47Z","snapshot_observed_at":"2026-08-04T05:57:06.226812Z","submitted_at":"2025-02-08T06:50:47Z","title":"Towards Trustworthy Retrieval Augmented Generation for Large Language Models: A Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.06872","snapshot_observed_at":"2026-08-07T05:41:16.319360Z","title":"Towards trustworthy retrieval augmented generation for large language models: A survey","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.319360Z"},"links":{"cited_paper":"/paper/2502.06872","citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:de7c524259b31b9ab5c5c1b482c8e1af5bda585cc93c11637935810ef0091352","observation_id":"32fa6e92-8d2b-4536-8c56-9f6b3a82dba7","resolution":{"observed_at":"2026-08-07T05:41:16.319360Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.871576Z","title":"The good and the bad: Exploring privacy issues in retrieval- augmented generation (rag)","venue":null,"work_id":"12ad2b78-1a51-4c85-b370-5fb0b2e37e37","year":2024},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.323637Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:21615c2adb8a9963b5e77957c35df7a0defaf7f8ba0a27205b5e01994a3d131b","observation_id":"6c2b3161-9b25-443a-940b-801145aca0ab","resolution":{"observed_at":"2026-08-07T05:41:16.875736Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.327324Z","title":"Membership inference attacks against machine learning models","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.327324Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:1d1cb7698504ac845c1f1e10f8a04aeb61eba9afb261cea265d9547e60232dd4","observation_id":"f569b53c-d8e1-4b2b-91d1-93436cd3ec64","resolution":{"observed_at":"2026-08-07T05:41:16.327324Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.853839Z","title":"Demystifying mem- bership inference attacks in machine learning as a service","venue":null,"work_id":"914caffd-691e-4a5d-b812-671cfaf0c001","year":2019},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.330803Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:4d99d99597899ae226b39b78e16a9ae6e280159ed4269810b9510be8d80129b1","observation_id":"247367ed-357a-4cba-8dce-aa72d9434c3e","resolution":{"observed_at":"2026-08-07T05:41:16.857805Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.842111Z","title":"Membership inference attacks on machine learning: A survey.ACM Computing Surveys (CSUR), 54(11s):1–37, 2022","venue":null,"work_id":"e10c355c-6b19-43d0-a7a7-e0f512881f5c","year":2022},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.334242Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:a4e84538d862c069d968dd1630e079700044370bd943cec1dbd2368741f79929","observation_id":"6676c883-1c3d-48c3-aba3-b5ab16764039","resolution":{"observed_at":"2026-08-07T05:41:16.846081Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.338013Z","title":"Membership inference attacks from first principles","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.338013Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:7950a1f567b2c92a78473c693926f14e5b080ed20b6550badc38e627c94d6816","observation_id":"28b078c1-7835-480b-992c-94f7c0188c0e","resolution":{"observed_at":"2026-08-07T05:41:16.338013Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.824168Z","title":"Label- only membership inference attacks","venue":null,"work_id":"adad6b9c-838d-45cb-adee-f1abc44a0164","year":1964},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.341704Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:be0edc607bacaf51515b2982bf90aee4cef75f5ffd59bd69d7c79fdecb76058c","observation_id":"2d117fb8-c330-47a8-9311-d276d65a66b2","resolution":{"observed_at":"2026-08-07T05:41:16.828099Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.811553Z","title":"Membership inference attack on graph neural networks","venue":null,"work_id":"29334024-9366-47c4-af53-d2c658027608","year":2021},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.345364Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:15a230f8e56dfac8034522d59de5aeed359dfaf49d311d75e66c174f9a01d7f6","observation_id":"dc2aadbe-c2ae-450c-bb23-b759918cb7b9","resolution":{"observed_at":"2026-08-07T05:41:16.815834Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.20446","last_updated":"2025-02-04T14:35:38Z","snapshot_observed_at":"2026-07-06T18:23:01.681030Z","submitted_at":"2024-05-30T19:46:36Z","title":"Is My Data in Your Retrieval Database? Membership Inference Attacks Against Retrieval Augmented Generation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2405.20446","snapshot_observed_at":"2026-08-07T05:41:16.348803Z","title":"Is my data in your retrieval database? membership inference attacks against retrieval augmented generation","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.348803Z"},"links":{"cited_paper":"/paper/2405.20446","citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:7c50bb5ba1879bae09f133937718efd1b1946e7666af21829437925c94566fa2","observation_id":"f8078718-1949-449a-9c71-7c316d50c905","resolution":{"observed_at":"2026-08-07T05:41:16.348803Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.799591Z","title":"Generating is believing: Membership inference attacks against retrieval-augmented generation","venue":null,"work_id":"595cfe9b-bd1f-41a5-9e54-f67dd7e9ab9f","year":2025},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.352727Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:a985080f1095d49baaf7ce5530c26dd001943617b201aee25d78ccbdcce6f3e4","observation_id":"2060775a-c452-41ae-97bc-850c1007bc63","resolution":{"observed_at":"2026-08-07T05:41:16.803549Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.787951Z","title":"Mask-based membership inference attacks for retrieval-augmented generation","venue":null,"work_id":"3f9cf991-dcda-4e5f-aca1-7ab68b74c977","year":2025},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.356173Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:e5701d8012b1a0f655858236ca130f5ec2a75ea7dea9ccbed4db18512609d2e4","observation_id":"0eab97cd-7987-4d70-ac6c-64f8561d3806","resolution":{"observed_at":"2026-08-07T05:41:16.792093Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2502.00306","last_updated":"2025-06-30T16:37:59Z","snapshot_observed_at":"2026-08-07T04:41:37.464741Z","submitted_at":"2025-02-01T04:01:18Z","title":"Riddle Me This! Stealthy Membership Inference for Retrieval-Augmented Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.00306","snapshot_observed_at":"2026-08-07T05:41:16.359751Z","title":"Riddle me this! stealthy membership inference for retrieval-augmented generation","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.359751Z"},"links":{"cited_paper":"/paper/2502.00306","citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:4e19e0d5db5d0a936d908913c5302ca8e0bca60e412187078e463fa71078688f","observation_id":"3b5c77f9-5892-4d98-805d-b4b39bfd87b3","resolution":{"observed_at":"2026-08-07T05:41:16.359751Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.777037Z","title":"Transformers in vision: A survey","venue":null,"work_id":"11e07878-e1a1-423b-be5b-14ee7f99aeb5","year":2022},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.363869Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:10207a5c775c29204bcdfe912d84d8737f2caad9c455681aae46ab7767ba9078","observation_id":"40114511-7377-4b24-b12f-ac04edbd3cba","resolution":{"observed_at":"2026-08-07T05:41:16.780666Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.766097Z","title":"An empirical study of training end-to-end vision-and-language transformers","venue":null,"work_id":"585e5692-67af-4dca-9650-5981d62feb60","year":2022},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.367484Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:0cf4f60bedbd55a150859277211fec6a51d99fced2d3423124985dac2749ad7d","observation_id":"819e72d1-e60d-4284-9479-c142feb48daf","resolution":{"observed_at":"2026-08-07T05:41:16.769871Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.754157Z","title":"Vision+ language applications: A survey","venue":null,"work_id":"4c942c01-b6d3-4375-83b2-d023948bc9d7","year":2023},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.371013Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:de255a2619c3b99111b7fe1700e15e8f7a8be9f31ff055312795e901e6554b66","observation_id":"517307f6-7cb6-4b5e-93b5-ad6059fa7375","resolution":{"observed_at":"2026-08-07T05:41:16.758534Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.374405Z","title":"Segment anything","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.374405Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:47d427dd305c49e89110e194516b92f640b4b9733560721bf0b2bd433f0c597b","observation_id":"8a401013-9e21-46df-90cf-c3b64df14d37","resolution":{"observed_at":"2026-08-07T05:41:16.374405Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.377858Z","title":"Learning transferable visual models from natural language supervision","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.377858Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:56a7bec82df4ec83d91635031af4d73f76f67a5b59b35a6bdeddc6beb914e948","observation_id":"3a6f1b9d-5995-4af7-9323-15bb8083a787","resolution":{"observed_at":"2026-08-07T05:41:16.377858Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.381129Z","title":"Vilbert: Pretraining task-agnostic visiolinguistic representations for vision-and-language tasks","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.381129Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:42d57c954b392222f38711afb4dc488d01fa6eee3dbd1f37754ea77e64cf597f","observation_id":"d0030a6b-3fb4-474e-bfae-29bce24bcd96","resolution":{"observed_at":"2026-08-07T05:41:16.381129Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.384868Z","title":"Blip: Bootstrapping language- image pre-training for unified vision-language understanding and generation","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.384868Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:9bd07e331cf2c78369503e0829c6d547dfcfc23cf30fbab8d06cc8674275ed28","observation_id":"7674bb19-03f5-43af-be4a-706a57043742","resolution":{"observed_at":"2026-08-07T05:41:16.384868Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.715205Z","title":"Colpali: Efficient document retrieval with vision language models","venue":null,"work_id":"8d503770-f12e-4d4a-a4c0-d315aa7da877","year":2024},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.388490Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:76eb7be5ac876844d54952593566a8b7c7e3a397401cb4ef8d06d04e2c17886b","observation_id":"1cc2457d-3ff8-49e3-9347-fea12dcc9416","resolution":{"observed_at":"2026-08-07T05:41:16.719713Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.704126Z","title":"M 4I: Multi-modal models membership inference","venue":null,"work_id":"a50a7a05-b2b7-44b4-9524-11ae604af0bc","year":2022},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.392014Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:139490dbb090394c1329e79587bf206371c4924cd624aa96a79f4ff25ec387c9","observation_id":"e6f7a65c-a724-4135-9cfc-c85afdc10de4","resolution":{"observed_at":"2026-08-07T05:41:16.708015Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.691599Z","title":"Practical membership inference attacks against large-scale multi-modal models: A pilot study","venue":null,"work_id":"29228d3e-c7f9-4648-bae2-71b78c3fdf94","year":2023},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.395545Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:a1daad4115bdddb4fe328987c66bad3a427a67884c2c1a61199f2ac7a4536600","observation_id":"6c6b3bc9-35a8-4811-a0c7-228c48cfbbec","resolution":{"observed_at":"2026-08-07T05:41:16.695725Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.680073Z","title":"Membership inference attacks against large vision-language models","venue":null,"work_id":"c2dc5e70-b5c4-4ac3-9cd5-1b3c66d02849","year":2024},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.399568Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:8edbeb23125d33909dab7b9149a0b3f0cba5dd6f39c96a6ef22ae74ebcd222b6","observation_id":"af0f77a8-62b7-410f-8c71-353c841ec18a","resolution":{"observed_at":"2026-08-07T05:41:16.683767Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.19876","last_updated":"2025-01-10T15:08:44Z","snapshot_observed_at":"2026-08-07T06:16:56.705552Z","submitted_at":"2024-11-29T17:38:56Z","title":"LUMIA: Linear probing for Unimodal and MultiModal Membership Inference Attacks leveraging internal LLM states","version":3},"cited_work":{"arxiv_id":"2411.19876","doi":null,"metadata_source":"pith","pith_arxiv_id":"2411.19876","snapshot_observed_at":"2026-08-07T05:41:16.538847Z","title":"LUMIA: Linear probing for Unimodal and MultiModal Membership Inference Attacks leveraging internal LLM states","venue":"cs.CR","work_id":"751722ac-7989-4de0-bc6a-8cc4796a215a","year":2024},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.403262Z"},"links":{"cited_paper":"/paper/2411.19876","citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:09ffe98b11634bc3af64afc8b2d13c4293015f8b8022ad20144b942d89bd951e","observation_id":"339e4907-db40-42f5-b6f7-228fb40d6ae9","resolution":{"observed_at":"2026-08-07T05:41:16.544908Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.407240Z","title":"Microsoft coco: Common objects in context","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.407240Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:4b7c733458793c5ae3582f98c2ec0204596429dba0290dda0f700c16dc0861dd","observation_id":"c0e74d3e-ed9b-4fce-93b8-4b8a8c48cf29","resolution":{"observed_at":"2026-08-07T05:41:16.407240Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.662406Z","title":"From image descriptions to visual denotations: New similarity metrics for semantic inference over event descriptions","venue":null,"work_id":"3d2cde35-95b1-4a54-bd19-58db6a3e2726","year":2014},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.410881Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:3aa18cddd76d1716dcf2a4da3bcf08546ac7f29c35db189d0191fdcf2957ae2e","observation_id":"34e1ff4f-5c12-4ad0-a965-1aae65fc9f4e","resolution":{"observed_at":"2026-08-07T05:41:16.666799Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.21276","last_updated":"2024-10-25T17:43:01Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-25T17:43:01Z","title":"GPT-4o System Card","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.21276","snapshot_observed_at":"2026-08-07T05:41:16.415006Z","title":"Gpt-4o system card","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.415006Z"},"links":{"cited_paper":"/paper/2410.21276","citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:9ded921ab7433f191fa2e40a74a31f987afb6bdc1706c6310f7a8d916e0aac64","observation_id":"daa72a66-6a7b-4486-8a0c-cc01190296a0","resolution":{"observed_at":"2026-08-07T05:41:16.415006Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.650324Z","title":"Gemini 2.0: Flash, flash-lite and pro, February 2025","venue":null,"work_id":"c564fc97-fba1-4c20-92ba-29347f4bd627","year":2025},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.419139Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:fe80eebf2b3444d0fa8c4fd381c0e9209320b3393d0d42493ed6a9e5a3cf8d17","observation_id":"e9621a9e-87cd-4820-868a-473f2be182cb","resolution":{"observed_at":"2026-08-07T05:41:16.654718Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.638835Z","title":"Introducing claude 3.5 sonnet, June 2024","venue":null,"work_id":"00ce65c8-0f0a-4f92-8395-b6729fb157f0","year":2024},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.422595Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:2dfb16a838e43ff7d93994ab601c79c1c9447694b72a55bfe2276d8f8170feba","observation_id":"5e84d686-dfc4-42a7-bc28-5ad8f77c783c","resolution":{"observed_at":"2026-08-07T05:41:16.642809Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.426384Z","title":"Chatglm: A family of large language models from glm-130b to glm-4 all tools, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.426384Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:7e193b17fe97dadb2000eaec67c60dc7a84301b2ac4fcf3682eb472d5ee91b7a","observation_id":"fa5953ad-4dd0-4dd0-b57b-17b83d730258","resolution":{"observed_at":"2026-08-07T05:41:16.426384Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.13923","last_updated":"2025-02-19T18:00:14Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-19T18:00:14Z","title":"Qwen2.5-VL Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.13923","snapshot_observed_at":"2026-08-07T05:41:16.430135Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.430135Z"},"links":{"cited_paper":"/paper/2502.13923","citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:3ed9a37451e31d572366a754c71126c13ec584bd9378cc814098a4443ff542cb","observation_id":"fabd6472-bf4c-46e8-a226-3f253c37c517","resolution":{"observed_at":"2026-08-07T05:41:16.430135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.07073","last_updated":"2024-10-10T17:59:16Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-09T17:16:22Z","title":"Pixtral 12B","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.07073","snapshot_observed_at":"2026-08-07T05:41:16.434605Z","title":"Pixtral 12b","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.434605Z"},"links":{"cited_paper":"/paper/2410.07073","citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:e6f3f5af9844f8b66a8b70c5471e3a2959250b769412cde3d60fd75bce603c76","observation_id":"034e6582-146d-4a68-8713-50e6b6e58e8d","resolution":{"observed_at":"2026-08-07T05:41:16.434605Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.620873Z","title":"Kimi chat, 2024","venue":null,"work_id":"86d9679f-c78c-4fee-9ed2-c90686b06ab9","year":2024},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.438815Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:2c5226a6ad3c3010de48929f840c40c9d7a7c5510f96d90f7742e1f718ceaa5a","observation_id":"397a290d-f4f2-4b0e-a5f2-6848968ef000","resolution":{"observed_at":"2026-08-07T05:41:16.624718Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.05271","last_updated":"2025-09-26T12:52:41Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-12-06T18:57:08Z","title":"Expanding Performance Boundaries of Open-Source Multimodal Models with Model, Data, and Test-Time Scaling","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.05271","snapshot_observed_at":"2026-08-07T05:41:16.442699Z","title":"Expanding performance boundaries of open-source multimodal models with model, data, and test-time scaling","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.442699Z"},"links":{"cited_paper":"/paper/2412.05271","citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:ecc37de0d8ffccd5f101c2c43333728faa29fceafbfc9014f1a03dede2fd5458","observation_id":"aeec34df-7491-4ad2-83be-91e163cef2c5","resolution":{"observed_at":"2026-08-07T05:41:16.442699Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.609684Z","title":"Detecting pretraining data from large language models","venue":null,"work_id":"ff7957f4-1212-4552-a40e-623ee9121ecd","year":null},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.447162Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:c6a84e5d3e33075d4ef514fd66a277a285d10fe0de1c4b65a69e34031d3db500","observation_id":"0e352e91-9826-48b8-956c-d1aac3abb518","resolution":{"observed_at":"2026-08-07T05:41:16.613367Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.02936","last_updated":"2025-02-12T04:41:34Z","snapshot_observed_at":"2026-08-06T22:02:50.460833Z","submitted_at":"2024-04-03T04:25:01Z","title":"Min-K%++: Improved Baseline for Detecting Pre-Training Data from Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2404.02936","snapshot_observed_at":"2026-08-07T05:41:16.451624Z","title":"Min-k%++: Improved baseline for detecting pre-training data from large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.451624Z"},"links":{"cited_paper":"/paper/2404.02936","citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:a91dfc0e654514377cd04cdf6a77446f7008dd4c29f17be3657d7c4c70970631","observation_id":"54e7395b-2eba-4243-8bec-cb458cf5e60b","resolution":{"observed_at":"2026-08-07T05:41:16.451624Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.455737Z","title":"You only look once: Unified, real-time object detection","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.455737Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:3289260f4fcb33d2bab95c061ae5e28cc3008ff844942be05e7a41cc5dd84415","observation_id":"923afd45-b3c0-45bb-8eaf-a9a0d8414b82","resolution":{"observed_at":"2026-08-07T05:41:16.455737Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:41:16.591268Z","title":"The image shows\\","venue":null,"work_id":"bd826bbe-6fd6-4619-adb4-a06d3fd0769f","year":2024},"citing_paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T05:41:16.459420Z"},"links":{"citing_paper":"/paper/2506.07399"},"observation_digest":"sha256:175c7e52ef52df2c408964deaf7cd853b2ce6be94cfc84abdecd5b2e0485fc7a","observation_id":"9a6b6dbc-00b2-4c33-8d79-cf57920ddb24","resolution":{"observed_at":"2026-08-07T05:41:16.595412Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.07399","last_updated":"2025-06-09T03:48:50Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-07T09:15:47.754212Z","submitted_at":"2025-06-09T03:48:50Z","title":"MrM: Black-Box Membership Inference Attacks against Multimodal RAG Systems"},"reference_resolution":{"displayed":47,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":19,"verified_exact":1,"verified_fuzzy":27},"total_outbound_references":47},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 47 of 47 outbound references and 1 inbound Pith citation observation for arXiv:2506.07399."}