Recover-to-Forget: Gradient Reconstruction from LoRA for Efficient LLM Unlearning
On the map: LLM safety and security → Machine unlearning
Abstract (arXiv)
Unlearning in large foundation models (e.g., LLMs) is essential for enabling dynamic knowledge updates, enforcing data deletion rights, and correcting model behavior. However, existing unlearning methods often require full-model fine-tuning or access to the original training data, which limits their scalability and practicality. In this work, we introduce Recover-to-Forget (R2F), a novel framework for efficient unlearning in LLMs based on reconstructing full-model gradient directions from low-rank LoRA adapter updates. Rather than performing backpropagation through the full model, we compute gradients with respect to LoRA parameters using multiple paraphrased prompts and train a gradient decoder to approximate the corresponding full-model gradients. To ensure applicability to larger or black-box models, the decoder is trained on a proxy model and transferred to target models. We provide a theoretical analysis of cross-model generalization and demonstrate that our method achieves effective unlearning while preserving general model performance. Experimental results demonstrate that R2F offers a scalable and lightweight alternative for unlearning in pretrained LLMs without requiring full retraining or access to internal parameters.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Placed in Machine unlearning, one of 12 directions in LLM safety and security. Builds on 37 of its 49 references that are in the map. First posted on arXiv 8 Dec 2025.
Builds on
37 of 49 references.
Closest ancestors · 12
Same direction, newest first
- 2025Deep Contrastive Unlearning for Language Models19 Mar
- 2024MUSE: Machine Unlearning Six-Way Evaluation for Language Models8 Jul
- 2024RWKU: Benchmarking Real-World Knowledge Unlearning for Large Language Models16 Jun
- 2024Reversing the Forget-Retain Objectives: An Efficient LLM Unlearning Framework from Logit Difference12 Jun
- 2024Offset Unlearning for Large Language Models17 Apr
- 2024Machine Unlearning of Pre-trained Large Language Models23 Feb
- 2024Rethinking Machine Unlearning for Large Language Models13 Feb
- 2024TOFU: A Task of Fictitious Unlearning for LLMs11 Jan
- 2023Unlearn What You Want to Forget: Efficient Unlearning for LLMs31 Oct
- 2023Who's Harry Potter? Approximate Unlearning in LLMs3 Oct
- 2022Knowledge Unlearning for Mitigating Privacy Risks in Language Models4 Oct
- 2022Deep Unlearning via Randomized Conditionally Independent Hessians15 Apr
Other references · 25
- 2020A Simple Framework for Contrastive Learning of Visual Representationscited by 11,979
- 2016Overcoming catastrophic forgetting in neural networkscited by 4,718
- 2022Locating and Editing Factual Associations in GPTcited by 2,609
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2019Machine Unlearningcited by 1,020
- 2019Deep Leakage from Gradientscited by 1,004
- 2022Mass-Editing Memory in a Transformercited by 976
- 2019Adversarial Examples Are Not Bugs, They Are Featurescited by 950
- 2020Intrinsic Dimensionality Explains the Effectiveness of Language Model Fine-Tuningcited by 658
- 2020A Survey on Contrastive Self-supervised Learningcited by 553
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
13 more
- 2019Making AI Forget You: Data Deletion in Machine Learningcited by 447
- 2020Amnesiac Machine Learningcited by 305
- 2024PiSSA: Principal Singular Values and Singular Vectors Adaptation of Large Language Modelscited by 261
- 2022Measuring Forgetting of Memorized Training Examplescited by 118
- 2022The Right to be Forgotten in Federated Learning: An Efficient Realization with Rapid Retrainingcited by 109
- 2020Machine Unlearning: Linear Filtration for Logit-based Classifierscited by 89
- 2018Understanding and Enhancing the Transferability of Adversarial Examplescited by 41
- 2023Fine-tuning Happens in Tiny Subspaces: Exploring Intrinsic Task-specific Subspaces of Pre-trained Language Modelscited by 19
- 2024DAGER: Exact Gradient Inversion for Large Language Modelscited by 12
- 2024Promoting Fairness in Link Prediction with Graph Enhancementcited by 6
- 2025Enabling Group Fairness in Graph Unlearning via Bi-level Debiasingcited by 3
- 2024Brain Surgery: Ensuring GDPR Compliance in Large Language Models via Concept Erasurecited by 1
- 2025ReCIT: Reconstructing Full Private Data from Gradient in Parameter-Efficient Fine-Tuning of Large Language Modelscited by 1
Built on by
Citing papers per year: 2026: 1.
1 paper.