Reverse-Engineering Model Editing on Language Models

In three linesResearchers reveal a critical vulnerability in locate-then-edit model editing methods: parameter updates enable attackers to recover edited data via KSTER attack exploiting low-rank structure. A defense using subspace camouflage is proposed to obfuscate fingerprints without compromising editing utility.

Summary generated by Claude — human-verified