When Machine Unlearning Meets Retrieval-Augmented Generation (RAG): Keep Secret or Forget Knowledge?
On the map: Retrieval-augmented generation → RAG pipeline design and evaluation
also in 1 more
Abstract (arXiv)
The deployment of large language models (LLMs) like ChatGPT and Gemini has shown their powerful natural language generation capabilities. However, these models can inadvertently learn and retain sensitive information and harmful content during training, raising significant ethical and legal concerns. To address these issues, machine unlearning has been introduced as a potential solution. While existing unlearning methods take into account the specific characteristics of LLMs, they often suffer from high computational demands, limited applicability, or the risk of catastrophic forgetting. To address these limitations, we propose a lightweight behavioral unlearning framework based on Retrieval-Augmented Generation (RAG) technology. By modifying the external knowledge base of RAG, we simulate the effects of forgetting without directly interacting with the unlearned LLM. We approach the construction of unlearned knowledge as a constrained optimization problem, deriving two key components that underpin the effectiveness of RAG-based unlearning. This RAG-based approach is particularly effective for closed-source LLMs, where existing unlearning methods often fail. We evaluate our framework through extensive experiments on both open-source and closed-source models, including ChatGPT, Gemini, Llama-2-7b-chat, and PaLM 2. The results demonstrate that our approach meets five key unlearning criteria: effectiveness, universality, harmlessness, simplicity, and robustness. Meanwhile, this approach can extend to multimodal large language models and LLM-based agents.
Key facts. Cited by 24 papers in the map (data through 14 Oct 2026). Placed in RAG pipeline design and evaluation, one of 15 directions in Retrieval-augmented generation. Builds on 49 of its 66 references that are in the map. First posted on arXiv 20 Oct 2024.
Builds on
49 of 66 references.
Closest ancestors · 4
Same direction, newest first
- 2024A Survey on RAG Meeting LLMs: Towards Retrieval-Augmented Large Language Models10 May
- 2024Blended RAG: Improving RAG (Retriever-Augmented Generation) Accuracy with Semantic Search and Hybrid Query-Based Retrievers22 Mar
- 2024PipeRAG: Fast Retrieval-Augmented Generation via Algorithm-System Co-design8 Mar
- 2024Retrieval-Augmented Generation for AI-Generated Content: A Survey29 Feb
Other references · 45
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,886
- 2023A Survey of Large Language Modelscited by 2,576
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2023Self-RAG: Learning to Retrieve, Generate, and Critique through Self-Reflectioncited by 1,839
- 2021Unsupervised Dense Information Retrieval with Contrastive Learningcited by 1,216
- 2019Machine Unlearningcited by 1,061
- 2023Semantic Uncertainty: Linguistic Invariances for Uncertainty Estimation in Natural Language Generationcited by 819
- 2024DeepSeek LLM: Scaling Open-Source Language Models with Longtermismcited by 642
- 2019Certified Data Removal from Machine Learning Modelscited by 535
- 2023"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Modelscited by 489
- 2023Detecting Pretraining Data from Large Language Modelscited by 387
33 more
- 2023Who's Harry Potter? Approximate Unlearning in LLMscited by 381
- 2023Formalizing and Benchmarking Prompt Injection Attacks and Defensescited by 364
- 2020Amnesiac Machine Learningcited by 319
- 2023Large Language Model Unlearningcited by 302
- 2023Forget-Me-Not: Learning to Forget in Text-to-Image Diffusion Modelscited by 301
- 2023LLM Self Defense: By Self Examination, LLMs Know They Are Being Trickedcited by 244
- 2024mGTE: Generalized Long-Context Text Representation and Reranking Models for Multilingual Text Retrievalcited by 236
- 2021Machine Unlearning of Features and Labelscited by 229
- 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 224
- 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMscited by 215
- 2024Do Membership Inference Attacks Work on Large Language Models?cited by 195
- 2024Towards Safer Large Language Models through Machine Unlearningcited by 139
- 2021Graph Unlearningcited by 138
- 2022Zero-Shot Machine Unlearningcited by 133
- 2024The Emerged Security and Privacy of LLM Agent: A Survey with Case Studiescited by 131
- 2024Attacks, Defenses and Evaluations for LLM Conversation Safety: A Surveycited by 130
- 2022Improving the Domain Adaptation of Retrieval Augmented Generation (RAG) Models for Open Domain Question Answeringcited by 127
- 2024Machine Unlearning of Pre-trained Large Language Modelscited by 119
- 2021Federated Unlearning via Class-Discriminative Pruningcited by 115
- 2024BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Modelscited by 86
- 2022Recommendation Unlearningcited by 80
- 2024TrojanRAG: Retrieval-Augmented Generation Can Be Backdoor Driver in Large Language Modelscited by 67
- 2023Give Us the Facts: Enhancing Large Language Models with Knowledge Graphs for Fact-aware Language Modelingcited by 56
- 2024On Large Language Model Continual Unlearningcited by 52
- 2024UnUnlearning: Unlearning is not sufficient for content regulation in advanced generative AIcited by 51
- 2024MLLM Is a Strong Reranker: Advancing Multimodal Retrieval-augmented Generation via Knowledge-enhanced Reranking and Noise-injected Trainingcited by 50
- 2024Offset Unlearning for Large Language Modelscited by 36
- 2024Erasing Concepts from Text-to-Image Diffusion Models with Few-shot Unlearningcited by 29
- 2024RAR: Retrieving And Ranking Augmented MLLMs for Visual Recognitioncited by 24
- 2024Unique Security and Privacy Threats of Large Language Models: A Comprehensive Surveycited by 23
- 2023Reinforcement Unlearningcited by 17
- 2023Watch Out! Simple Horizontal Class Backdoor Can Trivially Evade Defensecited by 8
- 2022CASSOCK: Viable Backdoor Attacks against DNN in The Wall of Source-Specific Backdoor Defencescited by 5
Built on by
Citing papers per year: 2025: 10; 2026: 14.
24 papers.
Sort:
By area:
- 2025Rethinking Memory in LLM based Agents: Representations, Operations, and Emerging Topicscited by 36
- 2026A Survey on Long-Term Memory Security in LLM Agents: Attacks, Defenses, and Governance Across the Memory Lifecyclecited by 27
- 2025A General Framework to Enhance Fine-tuning-based LLM Unlearningcited by 14
- 2025SoK: Machine Unlearning for Large Language Modelscited by 11
- 2025Keeping an Eye on LLM Unlearning: The Hidden Risk and Remedycited by 9
- 2025Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMscited by 8
- 2025DRAGON: Guard LLM Unlearning in Context via Negative Detection and Reasoningcited by 7
- 2026PruneRAG: Confidence-Guided Query Decomposition Trees for Efficient Retrieval-Augmented Generationcited by 5
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocolscited by 4
- 2025A Survey on Unlearning in Large Language Modelscited by 4
- 2026Evaluating Cross-Lingual Unlearning in Multilingual Language Modelscited by 3
- 2026LLMs Can Unlearn Refusal with Only 1,000 Benign Samplescited by 3
12 more
- 2025Ready2Unlearn: A Learning-Time Approach for Preparing Models with Future Unlearning Readinesscited by 2
- 2026STaR: Sensitive Trajectory Regulation for Unlearning in Large Reasoning Modelscited by 2
- 2026Guided Collaboration in Heterogeneous LLM-Based Multi-Agent Systems via Entropy-Based Understanding Assessment and Experience Retrievalcited by 2
- 2025Beyond Sharp Minima: Robust LLM Unlearning via Feedback-Guided Multi-Point Optimizationcited by 1
- 2026Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilitiescited by 1
- 2026Hidden Risks of Jev: An Empirical Study of Security, Privacy, and Dual Usecited by 1
- 2026Unlearning in LLMs: Methods, Evaluation, and Open Challengescited by 0
- 2026RUVA: Personalized Transparent On-Device Graph Reasoningcited by 0
- 2026Selective Forgetting for Large Reasoning Modelscited by 0
- 2026ICCU: In-Context Continual Unlearning via Pattern-Induced Refusal Rulescited by 0
- 2026Cascade: Hierarchical Recoverability Control for Large Language Model Unlearningcited by 0
- 2026Keep Your Receipts: Trustworthy Cleanup of Agent-Built Knowledge Graphscited by 0
- 2026Keep Your Receipts: Trustworthy Cleanup of Agent-Built Knowledge Graphs13 Oct 2026
- 2026Hidden Risks of Jev: An Empirical Study of Security, Privacy, and Dual Use4 Oct 2026
- 2026Cascade: Hierarchical Recoverability Control for Large Language Model Unlearning15 Sep 2026
- 2026ICCU: In-Context Continual Unlearning via Pattern-Induced Refusal Rules26 May 2026
- 2026A Survey on Long-Term Memory Security in LLM Agents: Attacks, Defenses, and Governance Across the Memory Lifecycle17 Apr 2026
- 2026Selective Forgetting for Large Reasoning Models4 Apr 2026
- 2026RUVA: Personalized Transparent On-Device Graph Reasoning17 Feb 2026
- 2026Guided Collaboration in Heterogeneous LLM-Based Multi-Agent Systems via Entropy-Based Understanding Assessment and Experience Retrieval14 Feb 2026
- 2026Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilities29 Jan 2026
- 2026LLMs Can Unlearn Refusal with Only 1,000 Benign Samples27 Jan 2026
- 2026Unlearning in LLMs: Methods, Evaluation, and Open Challenges19 Jan 2026
- 2026PruneRAG: Confidence-Guided Query Decomposition Trees for Efficient Retrieval-Augmented Generation16 Jan 2026
12 more
- 2026STaR: Sensitive Trajectory Regulation for Unlearning in Large Reasoning Models14 Jan 2026
- 2026Evaluating Cross-Lingual Unlearning in Multilingual Language Models10 Jan 2026
- 2025DRAGON: Guard LLM Unlearning in Context via Negative Detection and Reasoning8 Nov 2025
- 2025A Survey on Unlearning in Large Language Models29 Oct 2025
- 2025Beyond Sharp Minima: Robust LLM Unlearning via Feedback-Guided Multi-Point Optimization24 Sep 2025
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocols26 Jul 2025
- 2025Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMs13 Jun 2025
- 2025SoK: Machine Unlearning for Large Language Models10 Jun 2025
- 2025Keeping an Eye on LLM Unlearning: The Hidden Risk and Remedy31 May 2025
- 2025Ready2Unlearn: A Learning-Time Approach for Preparing Models with Future Unlearning Readiness16 May 2025
- 2025Rethinking Memory in LLM based Agents: Representations, Operations, and Emerging Topics1 May 2025
- 2025A General Framework to Enhance Fine-tuning-based LLM Unlearning25 Feb 2025
- 2025A General Framework to Enhance Fine-tuning-based LLM Unlearningcited by 14
- 2025SoK: Machine Unlearning for Large Language Modelscited by 11
- 2025Keeping an Eye on LLM Unlearning: The Hidden Risk and Remedycited by 9
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocolscited by 4
- 2025A Survey on Unlearning in Large Language Modelscited by 4
- 2026Evaluating Cross-Lingual Unlearning in Multilingual Language Modelscited by 3
- 2025Ready2Unlearn: A Learning-Time Approach for Preparing Models with Future Unlearning Readinesscited by 2
- 2025Beyond Sharp Minima: Robust LLM Unlearning via Feedback-Guided Multi-Point Optimizationcited by 1
- 2026Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilitiescited by 1
- 2026Hidden Risks of Jev: An Empirical Study of Security, Privacy, and Dual Usecited by 1
- 2026Unlearning in LLMs: Methods, Evaluation, and Open Challengescited by 0
- 2026ICCU: In-Context Continual Unlearning via Pattern-Induced Refusal Rulescited by 0
12 most cited of 13 All 13 (JSON)
- 2026Hidden Risks of Jev: An Empirical Study of Security, Privacy, and Dual Use4 Oct 2026
- 2026Cascade: Hierarchical Recoverability Control for Large Language Model Unlearning15 Sep 2026
- 2026ICCU: In-Context Continual Unlearning via Pattern-Induced Refusal Rules26 May 2026
- 2026Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilities29 Jan 2026
- 2026Unlearning in LLMs: Methods, Evaluation, and Open Challenges19 Jan 2026
- 2026Evaluating Cross-Lingual Unlearning in Multilingual Language Models10 Jan 2026
- 2025A Survey on Unlearning in Large Language Models29 Oct 2025
- 2025Beyond Sharp Minima: Robust LLM Unlearning via Feedback-Guided Multi-Point Optimization24 Sep 2025
- 2025Generative Model Unlearning: A Survey through Target Events, Unlearning Operators, and Evaluation Protocols26 Jul 2025
- 2025SoK: Machine Unlearning for Large Language Models10 Jun 2025
- 2025Keeping an Eye on LLM Unlearning: The Hidden Risk and Remedy31 May 2025
- 2025Ready2Unlearn: A Learning-Time Approach for Preparing Models with Future Unlearning Readiness16 May 2025
12 newest of 13 All 13 (JSON)
- 2025Rethinking Memory in LLM based Agents: Representations, Operations, and Emerging Topicscited by 36
- 2025DRAGON: Guard LLM Unlearning in Context via Negative Detection and Reasoningcited by 7
- 2026PruneRAG: Confidence-Guided Query Decomposition Trees for Efficient Retrieval-Augmented Generationcited by 5
- 2026STaR: Sensitive Trajectory Regulation for Unlearning in Large Reasoning Modelscited by 2
- 2026Guided Collaboration in Heterogeneous LLM-Based Multi-Agent Systems via Entropy-Based Understanding Assessment and Experience Retrievalcited by 2
- 2026Selective Forgetting for Large Reasoning Modelscited by 0
- 2026Selective Forgetting for Large Reasoning Models4 Apr 2026
- 2026Guided Collaboration in Heterogeneous LLM-Based Multi-Agent Systems via Entropy-Based Understanding Assessment and Experience Retrieval14 Feb 2026
- 2026PruneRAG: Confidence-Guided Query Decomposition Trees for Efficient Retrieval-Augmented Generation16 Jan 2026
- 2026STaR: Sensitive Trajectory Regulation for Unlearning in Large Reasoning Models14 Jan 2026
- 2025DRAGON: Guard LLM Unlearning in Context via Negative Detection and Reasoning8 Nov 2025
- 2025Rethinking Memory in LLM based Agents: Representations, Operations, and Emerging Topics1 May 2025
- 2026LLMs Can Unlearn Refusal with Only 1,000 Benign Samplescited by 3
- 2026LLMs Can Unlearn Refusal with Only 1,000 Benign Samples27 Jan 2026
Similar, not cited
Close in wording, no citation either way
- 2025LLM Unlearning Under the Microscope: A Full-Stack View on Methods and Metrics
- 2025Unlearning That Lasts: Utility-Preserving, Robust, and Almost Irreversible Forgetting in LLMs
- 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Difference
- 2024Catastrophic Failure of LLM Unlearning via Quantization
- 2024A Closer Look at Machine Unlearning for Large Language Models
- 2024Unsupervised Information Refinement Training of Large Language Models for Retrieval-Augmented Generation
- 2024Towards Effective Evaluations and Comparisons for LLM Unlearning Methods
- 2024Rethinking Machine Unlearning for Large Language Models