Publication
arXiv
Stage
Preprint
What we read
Summary of the paper
Authors
Sudip Bhujel, Shanghao Shi, Ruiquan Huang, Ning Zhang, Yang Xiao
Universities and research institutions
Not yet supplied in verified metadata; the Brief does not guess.

Institution metadata: OpenAlex record ↗

What they did and found

The study examines how gradients shared during on-device learning for embodied agents can leak private sequences of observations and actions. It finds that attackers can reconstruct trajectories more accurately when they use gradients from multiple, consecutive steps rather than single frames, even with some defenses.

Why it matters

This means simple protections may not fully stop leakage of private behavior data. Organizations may need sequence-aware protections that guard against leaks across entire training rollouts.

In practical terms, if a team uses shared gradients to train robots or navigation systems, an outsider could piece together what the robot saw and did over a sequence of moments. The attacker’s method improves as it uses context from several steps, not just one frame, which makes leaks harder to prevent.

A practical takeaway is to evaluate privacy in terms of whole training sessions, not isolated updates. If you must share gradients across devices, plan for defenses that disrupt cross-step patterns and timeline-based leakage.

Read the paper PDF ↗

Original sources · 1
  1. Temporal Gradient Inversion for Private Trajectory Reconstruction in Embodied Reinforcement Learning ↗arXiv · 2026-09-24

Check the original paper for its authors, methods, version and access terms.

What remains uncertain

Findings are based on point-goal navigation in a single simulator; generalizability to other tasks and larger policies remains uncertain.