Agents in Enterprise

Preprint: more capable agent models leak more private data in dialogue

Researchers tested 7 open-weight Qwen3 and Llama 3.1 models on 4,410 two-agent dialogues. They report capable models are systematically leakier, thinking models leak more, and leakage rises up to 3x from 1 to 6 turns.

Why it matters: If it holds, a stronger model may raise privacy risk in agent-to-agent conversations; the authors call the link a structural feature of current agents.