Detokenization Leaks: Reconstructing Local LLM Outputs From Cache Traces
DGX agentarXiv:2609.06674v1 Announce Type: cross Abstract: We present a new attack that reconstructs the text generated by locally hosted LLMs by observing CPU cache activity during detokenization. Unlike prio