Agent-Assisted Side-Channel Attacks on Non-Prefix KV Cache in RAG (SpliceLeak)

Prior KV-cache side channels need strict linear prefix alignment and so fail against real RAG queries with unique private prefixes. SpliceLeak exploits the deterministic micro-architecture of chunk alignment and fusion: a +104 ms hardware latency void, as few as 63 requests per token, up to 100% extraction success in bounded-entropy scenarios, evaluated on vLLM integrated with LMCache.

paper

2026-06-20

2026-10-04