mlsanityData to 7 Oct 2026

Agents Are All You Need for LLM Unlearning

arXiv 2502.00406 ↗First posted 1 Feb 2025cs.AI cs.CLcited by 9

On the map: LLM agents and tool use → General LLM agent frameworks and benchmarks

also in 1 more
Abstract (arXiv)

Information removal or suppression in large language models (LLMs) is a desired functionality, useful in AI regulation, legal compliance, safety, and privacy. LLM unlearning methods aim to remove information on demand from LLMs. Current LLM unlearning methods struggle to balance the unlearning efficacy and utility due to the competing nature of these objectives. Keeping the unlearning process computationally feasible without assuming access to the model weights is an overlooked area. In this work we show that textitagents might be all we need for effective and practical inference-time LLM unlearning. We present the first agentic LLM unlearning (textttALU) method, a multi-agent, retrain-free, model-agnostic approach to LLM unlearning that achieves effective unlearning while preserving the utility. Our textttALU framework unlearns by involving multiple LLM agents, each designed for a specific step in the unlearning process, without the need to update model weights for any of the agents in the framework. Users can easily request any set of unlearning instances in any sequence, and textttALU seamlessly adapts in real time. This is facilitated without requiring any changes in the underlying LLM model. Through extensive experiments on established benchmarks (TOFU, WMDP, WPU) and jailbreaking techniques (many shot, target masking, other languages), we demonstrate that textttALU consistently stands out as the most robust inference-time LLM unlearning framework among current state-of-the-art methods while incurring time cost that remains effectively constant regardless of the number of unlearning targets. We further highlight textttALU's superior performance compared to existing methods when evaluated at scale. Specifically, textttALU is assessed on up to 1000 unlearning targets, exceeding the evaluation scope of all previously proposed LLM unlearning methods.

Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Placed in General LLM agent frameworks and benchmarks, one of 16 directions in LLM agents and tool use. Builds on 50 of its 65 references that are in the map. First posted on arXiv 1 Feb 2025.

Builds on

50 of 65 references.

Closest ancestors · 1

Same direction, newest first

  1. 2023ChatEval: Towards Better LLM-based Evaluators through Multi-Agent Debate14 Aug

Other references · 49

  1. 2020Language Models are Few-Shot Learnerscited by 32,199
  2. 2023GPT-4 Technical Reportcited by 18,132
  3. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
  4. 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
  5. 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
  6. 2020Measuring Massive Multitask Language Understandingcited by 7,768
  7. 2022Self-Consistency Improves Chain of Thought Reasoning in Language Modelscited by 5,601
  8. 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,175
  9. 2024Scaling LLM Test-Time Compute Optimally can be More Effective than Scaling Model Parameterscited by 1,928
  10. 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,883
  11. 2024DeepSeek-Coder: When the Large Language Model Meets Programming -- The Rise of Code Intelligencecited by 1,154
  12. 2024TOFU: A Task of Fictitious Unlearning for LLMscited by 507
37 more
  1. 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
  2. 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearningcited by 484
  3. 2023"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Modelscited by 457
  4. 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Modelscited by 424
  5. 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 376
  6. 2023Who's Harry Potter? Approximate Unlearning in LLMscited by 366
  7. 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
  8. 2023Towards Unbounded Machine Unlearningcited by 261
  9. 2024Rethinking Machine Unlearning for Large Language Modelscited by 247
  10. 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 214
  11. 2021Fast Yet Effective Machine Unlearningcited by 209
  12. 2023Scalable and Transferable Black-Box Jailbreaks for Language Models via Persona Modulationcited by 202
  13. 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teachercited by 189
  14. 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampeningcited by 177
  15. 2023Beyond Memorization: Violating Privacy Via Inference with Large Language Modelscited by 167
  16. 2020Better Fine-Tuning by Reducing Representational Collapsecited by 156
  17. 2024Eight Methods to Evaluate Robust Unlearning in LLMscited by 153
  18. 2022Zero-Shot Machine Unlearningcited by 125
  19. 2023Copyright Violations and Large Language Modelscited by 108
  20. 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearningcited by 104
  21. 2024Model Editing Harms General Abilities of Large Language Models: Regularization to the Rescuecited by 101
  22. 2023KGA: A General Machine Unlearning Framework Based on Knowledge Gap Alignmentcited by 94
  23. 2024Guardrail Baselines for Unlearning in LLMscited by 90
  24. 2024Soft Prompt Threats: Attacking Safety Alignment and Unlearning in Open-Source LLMs through the Embedding Spacecited by 88
  25. 2023Machine Unlearning: Solutions and Challengescited by 85
  26. 2024TreeBoN: Enhancing Inference-Time Alignment with Speculative Tree-Search and Best-of-N Samplingcited by 61
  27. 2024PRP: Propagating Universal Perturbations to Attack Large Language Model Guard-Railscited by 49
  28. 2023Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreakscited by 45
  29. 2023SNAP: Self-Supervised Neural Maps for Visual Positioning and Semantic Understandingcited by 38
  30. 2024Fast Exact Unlearning for In-Context Learning Data for LLMscited by 33
  31. 2024Revisiting Who's Harry Potter: Towards Targeted Unlearning from a Causal Intervention Perspectivecited by 33
  32. 2023Machine Unlearning in Learned Databases: An Experimental Analysiscited by 17
  33. 2024UnStar: Unlearning with Self-Taught Anti-Sample Reasoning for LLMscited by 14
  34. 2024Evaluating Deep Unlearning in Large Language Modelscited by 12
  35. 2024Risk and Response in Large Language Models: Evaluating Key Threat Categoriescited by 10
  36. 2024Opt-Out: Investigating Entity-Level Unlearning for Large Language Models via Optimal Transportcited by 10
  37. 2024Black-Box Forgettingcited by 5

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 5; 2026: 4.

9 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Secure Forgetting: A Framework for Privacy-Driven Unlearning in Large Language Model (LLM)-Based Agents
  2. 2026Trajectory Unlearning on LLM-based Agents
  3. 2026Forgotten in Weights, Recovered by Tools: Agentic Tool Unlearning for LLM Agents
  4. 2024Unified Parameter-Efficient Unlearning for LLMs
  5. 2024WAGLE: Strategic Weight Attribution for Effective and Modular Unlearning in Large Language Models
  6. 2026Agentic Unlearning: When LLM Agent Meets Machine Unlearning
  7. 2025LLM Unlearning Reveals a Stronger-Than-Expected Coreset Effect in Current Benchmarks
  8. 2024Offline Training of Language Model Agents with Functions as Learnable Weights