CORTEXA
← Browse
arxivcs.LGcs.AIcs.CR2026-07-15

Value Leakage: An LLM's Answers Are Silently Shaped by Its Own Values

Jan Betley, Johannes Treutlein, Jan Dubiński, Harry Mayne, Karol Gałązka, Niels Warncke, Anna Sztyber-Betley, Owain Evans

People use language models for practical questions whose answers are difficult to verify. We show that models exhibit covert value leakage: the information they provide is influenced by their own values, without this influence being disclosed to the user. In one of our evaluations, the user is considering investing in an AI company and wants to know how likely the AI bubble is to pop. Claude Opus 4.8 gives a lower probability when the company under consideration is Anthropic rather than OpenAI. Yet Claude mostly fails to disclose this influence to the user. Covert value leakage is a form of misalignment because it goes against the user's preferences and is likely to mislead them. To investigate this phenomenon, we introduce a suite of evaluations to quantify value leakage and whether models disclose it. We find that models are influenced by different types of values, including preferences for morally good outcomes, for the company that developed them, and for some human leisure activities over others. We often observe large differences among frontier models on the same evaluation. For example, on a Fermi-estimation task, Claude models falsely claim to give unbiased answers in their chain-of-thought, while Qwen models explain how their values bias their answers. Value leakage is a failure mode distinct from sycophancy and reward hacking, and current alignment training and evaluations do not adequately address it.

View free PDFSource page

Related papers

arxivcs.CRcs.AIcs.LG2026-06-25

On the Inseparability of Instructions and Data in Shared-Embedding Sequence Models

Dewank Pant, Shruti Lohani, Avijit Kumar

Prompt injection is the top security risk for LLM-integrated applications, yet every defense proposed so far has been broken. We prove this is not a coincidence: in shared-embedding architectures that lack enforced control-data separation, perfect prompt-injection prevention is m…

View free PDFSource page
arxivcs.CRcs.AIcs.LG2026-07-16

FLINT: Fingerprinting Federated Learning Architectures from 5G PHY-Layer Side Channels

Md Nahid Hasan Shuvo, Mahmudul Hassan Ashik, Moinul Hossain

Federated Learning (FL) over 5G cellular networks protects raw data but remains vulnerable to side-channel leakage. Prior fingerprinting attacks assume packet-level network visibility, an assumption that does not hold at the 5G Physical (PHY) layer, where user payloads are encryp…

View free PDFSource page
arxivcs.CRcs.AIcs.LG2026-07-22

Taming the Security-Energy Paradox: A Green AI Approach to Optimized Android Malware Detection

Shrinidhi Sridhar, Vikas K. Malviya

An increase in advanced Android malware requires the use of deep learning models, which can run on Android devices. But there is a trade-off between security and energy use, as strong detection models can drain the battery of devices fast. This work tests different Multi-Layer Pe…

View free PDFSource page