mlsanityData to 14 Oct 2026

When Machine Unlearning Meets Retrieval-Augmented Generation (RAG): Keep Secret or Forget Knowledge?

arXiv 2410.15267 ↗First posted 20 Oct 2024cs.CR cs.CLcited by 24

On the map: Retrieval-augmented generation → RAG pipeline design and evaluation

also in 1 more
Abstract (arXiv)

The deployment of large language models (LLMs) like ChatGPT and Gemini has shown their powerful natural language generation capabilities. However, these models can inadvertently learn and retain sensitive information and harmful content during training, raising significant ethical and legal concerns. To address these issues, machine unlearning has been introduced as a potential solution. While existing unlearning methods take into account the specific characteristics of LLMs, they often suffer from high computational demands, limited applicability, or the risk of catastrophic forgetting. To address these limitations, we propose a lightweight behavioral unlearning framework based on Retrieval-Augmented Generation (RAG) technology. By modifying the external knowledge base of RAG, we simulate the effects of forgetting without directly interacting with the unlearned LLM. We approach the construction of unlearned knowledge as a constrained optimization problem, deriving two key components that underpin the effectiveness of RAG-based unlearning. This RAG-based approach is particularly effective for closed-source LLMs, where existing unlearning methods often fail. We evaluate our framework through extensive experiments on both open-source and closed-source models, including ChatGPT, Gemini, Llama-2-7b-chat, and PaLM 2. The results demonstrate that our approach meets five key unlearning criteria: effectiveness, universality, harmlessness, simplicity, and robustness. Meanwhile, this approach can extend to multimodal large language models and LLM-based agents.

Key facts. Cited by 24 papers in the map (data through 14 Oct 2026). Placed in RAG pipeline design and evaluation, one of 15 directions in Retrieval-augmented generation. Builds on 49 of its 66 references that are in the map. First posted on arXiv 20 Oct 2024.

Builds on

49 of 66 references.

Closest ancestors · 4

Same direction, newest first

  1. 2024A Survey on RAG Meeting LLMs: Towards Retrieval-Augmented Large Language Models10 May
  2. 2024Blended RAG: Improving RAG (Retriever-Augmented Generation) Accuracy with Semantic Search and Hybrid Query-Based Retrievers22 Mar
  3. 2024PipeRAG: Fast Retrieval-Augmented Generation via Algorithm-System Co-design8 Mar
  4. 2024Retrieval-Augmented Generation for AI-Generated Content: A Survey29 Feb

Other references · 45

  1. 2020Measuring Massive Multitask Language Understandingcited by 7,963
  2. 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,886
  3. 2023A Survey of Large Language Modelscited by 2,576
  4. 2020Extracting Training Data from Large Language Modelscited by 2,189
  5. 2023Self-RAG: Learning to Retrieve, Generate, and Critique through Self-Reflectioncited by 1,839
  6. 2021Unsupervised Dense Information Retrieval with Contrastive Learningcited by 1,216
  7. 2019Machine Unlearningcited by 1,061
  8. 2023Semantic Uncertainty: Linguistic Invariances for Uncertainty Estimation in Natural Language Generationcited by 819
  9. 2024DeepSeek LLM: Scaling Open-Source Language Models with Longtermismcited by 642
  10. 2019Certified Data Removal from Machine Learning Modelscited by 535
  11. 2023"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Modelscited by 489
  12. 2023Detecting Pretraining Data from Large Language Modelscited by 387
33 more
  1. 2023Who's Harry Potter? Approximate Unlearning in LLMscited by 381
  2. 2023Formalizing and Benchmarking Prompt Injection Attacks and Defensescited by 364
  3. 2020Amnesiac Machine Learningcited by 319
  4. 2023Large Language Model Unlearningcited by 302
  5. 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Modelscited by 301
  6. 2023LLM Self Defense: By Self Examination, LLMs Know They Are Being Trickedcited by 244
  7. 2024mGTE: Generalized Long-Context Text Representation and Reranking Models for Multilingual Text Retrievalcited by 236
  8. 2021Machine Unlearning of Features and Labelscited by 229
  9. 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 224
  10. 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMscited by 215
  11. 2024Do Membership Inference Attacks Work on Large Language Models?cited by 195
  12. 2024Towards Safer Large Language Models through Machine Unlearningcited by 139
  13. 2021Graph Unlearningcited by 138
  14. 2022Zero-Shot Machine Unlearningcited by 133
  15. 2024The Emerged Security and Privacy of LLM Agent: A Survey with Case Studiescited by 131
  16. 2024Attacks, Defenses and Evaluations for LLM Conversation Safety: A Surveycited by 130
  17. 2022Improving the Domain Adaptation of Retrieval Augmented Generation (RAG) Models for Open Domain Question Answeringcited by 127
  18. 2024Machine Unlearning of Pre-trained Large Language Modelscited by 119
  19. 2021Federated Unlearning via Class-Discriminative Pruningcited by 115
  20. 2024BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Modelscited by 86
  21. 2022Recommendation Unlearningcited by 80
  22. 2024TrojanRAG: Retrieval-Augmented Generation Can Be Backdoor Driver in Large Language Modelscited by 67
  23. 2023Give Us the Facts: Enhancing Large Language Models with Knowledge Graphs for Fact-aware Language Modelingcited by 56
  24. 2024On Large Language Model Continual Unlearningcited by 52
  25. 2024UnUnlearning: Unlearning is not sufficient for content regulation in advanced generative AIcited by 51
  26. 2024MLLM Is a Strong Reranker: Advancing Multimodal Retrieval-augmented Generation via Knowledge-enhanced Reranking and Noise-injected Trainingcited by 50
  27. 2024Offset Unlearning for Large Language Modelscited by 36
  28. 2024Erasing Concepts from Text-to-Image Diffusion Models with Few-shot Unlearningcited by 29
  29. 2024RAR: Retrieving And Ranking Augmented MLLMs for Visual Recognitioncited by 24
  30. 2024Unique Security and Privacy Threats of Large Language Models: A Comprehensive Surveycited by 23
  31. 2023Reinforcement Unlearningcited by 17
  32. 2023Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defensecited by 8
  33. 2022CASSOCK: Viable Backdoor Attacks against DNN in The Wall of Source-Specific Backdoor Defencescited by 5

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 10; 2026: 14.

24 papers.

Sort:

By area:

  1. 2025Rethinking Memory in LLM based Agents: Representations, Operations, and Emerging Topicscited by 36
  2. 2026A Survey on Long-Term Memory Security in LLM Agents: Attacks, Defenses, and Governance Across the Memory Lifecyclecited by 27
  3. 2025A General Framework to Enhance Fine-tuning-based LLM Unlearningcited by 14
  4. 2025SoK: Machine Unlearning for Large Language Modelscited by 11
  5. 2025Keeping an Eye on LLM Unlearning: The Hidden Risk and Remedycited by 9
  6. 2025Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMscited by 8
  7. 2025DRAGON: Guard LLM Unlearning in Context via Negative Detection and Reasoningcited by 7
  8. 2026PruneRAG: Confidence-Guided Query Decomposition Trees for Efficient Retrieval-Augmented Generationcited by 5
  9. 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocolscited by 4
  10. 2025A Survey on Unlearning in Large Language Modelscited by 4
  11. 2026Evaluating Cross-Lingual Unlearning in Multilingual Language Modelscited by 3
  12. 2026LLMs Can Unlearn Refusal with Only 1,000 Benign Samplescited by 3
12 more
  1. 2025Ready2Unlearn: A Learning-Time Approach for Preparing Models with Future Unlearning Readinesscited by 2
  2. 2026STaR: Sensitive Trajectory Regulation for Unlearning in Large Reasoning Modelscited by 2
  3. 2026Guided Collaboration in Heterogeneous LLM-Based Multi-Agent Systems via Entropy-Based Understanding Assessment and Experience Retrievalcited by 2
  4. 2025Beyond Sharp Minima: Robust LLM Unlearning via Feedback-Guided Multi-Point Optimizationcited by 1
  5. 2026Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilitiescited by 1
  6. 2026Hidden Risks of Jev: An Empirical Study of Security, Privacy, and Dual Usecited by 1
  7. 2026Unlearning in LLMs: Methods, Evaluation, and Open Challengescited by 0
  8. 2026RUVA: Personalized Transparent On-Device Graph Reasoningcited by 0
  9. 2026Selective Forgetting for Large Reasoning Modelscited by 0
  10. 2026ICCU: In-Context Continual Unlearning via Pattern-Induced Refusal Rulescited by 0
  11. 2026Cascade: Hierarchical Recoverability Control for Large Language Model Unlearningcited by 0
  12. 2026Keep Your Receipts: Trustworthy Cleanup of Agent-Built Knowledge Graphscited by 0

Similar, not cited

Close in wording, no citation either way

  1. 2025LLM Unlearning Under the Microscope: A Full-Stack View on Methods and Metrics
  2. 2025Unlearning That Lasts: Utility-Preserving, Robust, and Almost Irreversible Forgetting in LLMs
  3. 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Difference
  4. 2024Catastrophic Failure of LLM Unlearning via Quantization
  5. 2024A Closer Look at Machine Unlearning for Large Language Models
  6. 2024Unsupervised Information Refinement Training of Large Language Models for Retrieval-Augmented Generation
  7. 2024Towards Effective Evaluations and Comparisons for LLM Unlearning Methods
  8. 2024Rethinking Machine Unlearning for Large Language Models