Probing Memorization of Tabular In-Context Learning
Not on the map. Why?
Abstract (arXiv)
Large tabular models (LTMs), i.e., tabular foundation models leveraging in-context learning (ICL), achieve state-of-the-art performance on tabular tasks. While LLMs are known to unintentionally memorize training data, the memorization dynamics of LTMs remain largely unexplored. We investigate the potential for parametric memorization in tabular ICL. We introduce ICLMEM, a probing framework designed to separate context-based predictions from parametric memorization. Our zero-information multiple-choice context strips away valid contextual patterns to force the model to fall back on its parametric memory. Our controlled fine-tuning setup establishes membership ground truth and accounts for common pitfalls, e.g., distribution shift, feature contamination, base-rate fallacy, and the pre-trained base model acts as reference to calibrate for sample difficulty. Our controlled evaluation on a leading real-world-trained LTM detects moderate memorization signals in 8 out of 10 tasks (AUC up to 0.67 and TPR at 1% FPR >0.1). Notably, memorization signals are strongest for low-cardinality and binary tasks. However, they largely vanish under realistic training conditions. Our findings show LTM memorization signals under specific circumstances (single-task fine-tuning with fixed samples across many epochs and small query size). To protect sensitive data, appropriate measures must be taken, which we discuss.
Key facts. Cited by 1 paper in the map (data through 13 Oct 2026). Builds on 36 of its 43 references that are in the map. First posted on arXiv 30 Jun 2026.
Builds on
36 of 43 references.
References · 36
- 2020Language Models are Few-Shot Learnerscited by 32,320
- 2016Deep Learning with Differential Privacycited by 2,718
- 2020Extracting Training Data from Large Language Modelscited by 2,181
- 2021Membership Inference Attacks From First Principlescited by 872
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 864
- 2022TabPFN: A Transformer That Solves Small Tabular Classification Problems in a Secondcited by 652
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 412
- 2021Differentially Private Fine-tuning of Language Modelscited by 398
- 2020Label-Only Membership Inference Attackscited by 386
- 2021Transformers Can Do Bayesian Inferencecited by 346
- 2025TabICL: A Tabular Foundation Model for In-Context Learning on Large Datacited by 272
- 2021On the Importance of Difficulty Calibration in Membership Inference Attackscited by 144
24 more
- 2022The Privacy Onion Effect: Memorization is Relativecited by 136
- 2025TabPFN-2.5: Advancing the State of the Art in Tabular Foundation Modelscited by 121
- 2023Low-Cost High-Power Membership Inference Attackscited by 106
- 2024Why Tabular Foundation Models Should Be a Research Prioritycited by 103
- 2024TabDPT: Scaling Tabular Foundation Models on Real Datacited by 101
- 2024CARTE: Pretraining and Transfer for Tabular Learningcited by 69
- 2022SoK: Let the Privacy Games Begin! A Unified Treatment of Data Inference Privacy in Machine Learningcited by 51
- 2024Membership Inference Attacks Cannot Prove that a Model Was Trained On Your Datacited by 50
- 2022Are Attribute Inference Attacks Just Imputation?cited by 49
- 2024Membership Inference Attacks Against In-Context Learningcited by 42
- 2025Real-TabPFN: Improving Tabular Foundation Models via Continued Pre-training With Real-World Datacited by 37
- 2025ConTextTab: A Semantics-Aware Tabular In-Context Learnercited by 32
- 2024On the Privacy Risk of In-context Learningcited by 31
- 2023A Linear Reconstruction Approach for Attribute Inference Attacks against Synthetic Datacited by 24
- 2024Elephants Never Forget: Testing Language Models for Memorization of Tabular Datacited by 19
- 2025Chasing Shadows: Pitfalls in LLM Security Researchcited by 13
- 2025SALT: Sales Autocompletion Linked Business Tables Datasetcited by 12
- 2024Constrained Adaptive Attack: Effective Adversarial Attack Against Deep Neural Networks for Tabular Datacited by 11
- 2026Membership Inference Attacks Against Fine-tuned Diffusion Language Modelscited by 5
- 2025Urania: Differentially Private Insights into AI Usecited by 4
- 2026Benchmarking Empirical Privacy Protection for Adaptations of Large Language Modelscited by 4
- 2025On the Robustness of Tabular Foundation Models: Test-Time Attacks and In-Context Defensescited by 3
- 2025Tab-MIA: A Benchmark Dataset for Membership Inference Attacks on Tabular Data in LLMscited by 3
- 2026Unintended Memorization of Sensitive Information in Fine-Tuned Language Modelscited by 3
Built on by
Citing papers per year: 2026: 1.
1 paper.