Agents Are All You Need for LLM Unlearning
On the map: LLM agents and tool use → General LLM agent frameworks and benchmarks
also in 1 more
Abstract (arXiv)
Information removal or suppression in large language models (LLMs) is a desired functionality, useful in AI regulation, legal compliance, safety, and privacy. LLM unlearning methods aim to remove information on demand from LLMs. Current LLM unlearning methods struggle to balance the unlearning efficacy and utility due to the competing nature of these objectives. Keeping the unlearning process computationally feasible without assuming access to the model weights is an overlooked area. In this work we show that textitagents might be all we need for effective and practical inference-time LLM unlearning. We present the first agentic LLM unlearning (textttALU) method, a multi-agent, retrain-free, model-agnostic approach to LLM unlearning that achieves effective unlearning while preserving the utility. Our textttALU framework unlearns by involving multiple LLM agents, each designed for a specific step in the unlearning process, without the need to update model weights for any of the agents in the framework. Users can easily request any set of unlearning instances in any sequence, and textttALU seamlessly adapts in real time. This is facilitated without requiring any changes in the underlying LLM model. Through extensive experiments on established benchmarks (TOFU, WMDP, WPU) and jailbreaking techniques (many shot, target masking, other languages), we demonstrate that textttALU consistently stands out as the most robust inference-time LLM unlearning framework among current state-of-the-art methods while incurring time cost that remains effectively constant regardless of the number of unlearning targets. We further highlight textttALU's superior performance compared to existing methods when evaluated at scale. Specifically, textttALU is assessed on up to 1000 unlearning targets, exceeding the evaluation scope of all previously proposed LLM unlearning methods.
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Placed in General LLM agent frameworks and benchmarks, one of 16 directions in LLM agents and tool use. Builds on 50 of its 65 references that are in the map. First posted on arXiv 1 Feb 2025.
Builds on
50 of 65 references.
Closest ancestors · 1
Same direction, newest first
Other references · 49
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2023GPT-4 Technical Reportcited by 18,132
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 7,916
- 2020Measuring Massive Multitask Language Understandingcited by 7,768
- 2022Self-Consistency Improves Chain of Thought Reasoning in Language Modelscited by 5,601
- 2024Gemini 1.5: Unlocking multimodal understanding across millions of tokens of contextcited by 3,175
- 2024Scaling LLM Test-Time Compute Optimally can be More Effective than Scaling Model Parameterscited by 1,928
- 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,883
- 2024DeepSeek-Coder: When the Large Language Model Meets Programming -- The Rise of Code Intelligencecited by 1,154
- 2024TOFU: A Task of Fictitious Unlearning for LLMscited by 507
37 more
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
- 2024Negative Preference Optimization: From Catastrophic Collapse to Effective Unlearningcited by 484
- 2023"Do Anything Now": Characterizing and Evaluating In-The-Wild Jailbreak Prompts on Large Language Modelscited by 457
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Modelscited by 424
- 2023SalUn: Empowering Machine Unlearning via Gradient-based Weight Saliency in Both Image Classification and Generationcited by 376
- 2023Who's Harry Potter? Approximate Unlearning in LLMscited by 366
- 2020Descent-to-Delete: Gradient-Based Methods for Machine Unlearningcited by 303
- 2023Towards Unbounded Machine Unlearningcited by 261
- 2024Rethinking Machine Unlearning for Large Language Modelscited by 247
- 2023In-Context Unlearning: Language Models as Few Shot Unlearnerscited by 214
- 2021Fast Yet Effective Machine Unlearningcited by 209
- 2023Scalable and Transferable Black-Box Jailbreaks for Language Models via Persona Modulationcited by 202
- 2022Can Bad Teaching Induce Forgetting? Unlearning in Deep Networks using an Incompetent Teachercited by 189
- 2023Fast Machine Unlearning Without Retraining Through Selective Synaptic Dampeningcited by 177
- 2023Beyond Memorization: Violating Privacy Via Inference with Large Language Modelscited by 167
- 2020Better Fine-Tuning by Reducing Representational Collapsecited by 156
- 2024Eight Methods to Evaluate Robust Unlearning in LLMscited by 153
- 2022Zero-Shot Machine Unlearningcited by 125
- 2023Copyright Violations and Large Language Modelscited by 108
- 2024SOUL: Unlocking the Power of Second-Order Optimization for LLM Unlearningcited by 104
- 2024Model Editing Harms General Abilities of Large Language Models: Regularization to the Rescuecited by 101
- 2023KGA: A General Machine Unlearning Framework Based on Knowledge Gap Alignmentcited by 94
- 2024Guardrail Baselines for Unlearning in LLMscited by 90
- 2024Soft Prompt Threats: Attacking Safety Alignment and Unlearning in Open-Source LLMs through the Embedding Spacecited by 88
- 2023Machine Unlearning: Solutions and Challengescited by 85
- 2024TreeBoN: Enhancing Inference-Time Alignment with Speculative Tree-Search and Best-of-N Samplingcited by 61
- 2024PRP: Propagating Universal Perturbations to Attack Large Language Model Guard-Railscited by 49
- 2023Tricking LLMs into Disobedience: Formalizing, Analyzing, and Detecting Jailbreakscited by 45
- 2023SNAP: Self-Supervised Neural Maps for Visual Positioning and Semantic Understandingcited by 38
- 2024Fast Exact Unlearning for In-Context Learning Data for LLMscited by 33
- 2024Revisiting Who's Harry Potter: Towards Targeted Unlearning from a Causal Intervention Perspectivecited by 33
- 2023Machine Unlearning in Learned Databases: An Experimental Analysiscited by 17
- 2024UnStar: Unlearning with Self-Taught Anti-Sample Reasoning for LLMscited by 14
- 2024Evaluating Deep Unlearning in Large Language Modelscited by 12
- 2024Risk and Response in Large Language Models: Evaluating Key Threat Categoriescited by 10
- 2024Opt-Out: Investigating Entity-Level Unlearning for Large Language Models via Optimal Transportcited by 10
- 2024Black-Box Forgettingcited by 5
Built on by
Citing papers per year: 2025: 5; 2026: 4.
9 papers.
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deploymentcited by 110
- 2025SoK: Machine Unlearning for Large Language Modelscited by 9
- 2025AntiDote: Bi-level Adversarial Training for Tamper-Resistant LLMscited by 4
- 2025A Survey on Unlearning in Large Language Modelscited by 2
- 2026Multilingual Unlearning in LLMs: Transfer, Dynamics, and Reversibilitycited by 2
- 2026Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilitiescited by 1
- 2025Chrysalis: A Unified System for Comparing Active Teaching and Passive Learning with AI Agents in Educationcited by 0
- 2026Unlearning in LLMs: Methods, Evaluation, and Open Challengescited by 0
- 2026Unlearning Is Not Just Erasing: Temporal Decoupling via Generation Inequalitycited by 0
- 2026Unlearning Is Not Just Erasing: Temporal Decoupling via Generation Inequality24 Aug 2026
- 2026Multilingual Unlearning in LLMs: Transfer, Dynamics, and Reversibility2 Jun 2026
- 2026Beyond Forgetting: Representation Misdirection Elicits Controllable Side Behaviors and Capabilities29 Jan 2026
- 2026Unlearning in LLMs: Methods, Evaluation, and Open Challenges19 Jan 2026
- 2025A Survey on Unlearning in Large Language Models29 Oct 2025
- 2025Chrysalis: A Unified System for Comparing Active Teaching and Passive Learning with AI Agents in Education6 Oct 2025
- 2025AntiDote: Bi-level Adversarial Training for Tamper-Resistant LLMs6 Sep 2025
- 2025SoK: Machine Unlearning for Large Language Models10 Jun 2025
- 2025A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment22 Apr 2025
Similar, not cited
Close in wording, no citation either way
- 2026Secure Forgetting: A Framework for Privacy-Driven Unlearning in Large Language Model (LLM)-Based Agents
- 2026Trajectory Unlearning on LLM-based Agents
- 2026Forgotten in Weights, Recovered by Tools: Agentic Tool Unlearning for LLM Agents
- 2024Unified Parameter-Efficient Unlearning for LLMs
- 2024WAGLE: Strategic Weight Attribution for Effective and Modular Unlearning in Large Language Models
- 2026Agentic Unlearning: When LLM Agent Meets Machine Unlearning
- 2025LLM Unlearning Reveals a Stronger-Than-Expected Coreset Effect in Current Benchmarks
- 2024Offline Training of Language Model Agents with Functions as Learnable Weights