Preliminary research
HijackKV: New Threat in Position-Independent KV Cache Reuse
AI-collected research leads through 22 September 2026, including targeted additions between broader sweeps. Unranked, incomplete, not community-vetted, and subject to change.
Position-independent KV cache reuse lets a serving system reuse cached key-value state whenever identical text chunks appear, whatever their position. Because a cache entry is retrieved by token match but encodes the context it was computed in, a benign-looking chunk can carry an attacker-controlled prefix, and reusing it in a victim's query steers the model with no adversarial text in the input.
Record
- Researcher
- Yichi Zhang, Zhiqi Wang, Huan Zhang and Yuchen Yang
- Published by
- usenix.org
- Topic
- Other
In the archive
Related sources
- HijackKV: New Threat in Position-Independent KV Cache Reuse (Paper) Whitepaper
- HijackKV: New Threat in Position-Independent KV Cache Reuse
- KV Cache Hijack Repository
Tags
This page is the archive's own catalogue record. The research is the work of Yichi Zhang, Zhiqi Wang, Huan Zhang and Yuchen Yang, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .