Recent Analysis Exposes Widespread Unintentional Data Leaks in Preprint Sources

Researchers relying on the arXiv preprint server for rapid dissemination of their work are facing a new set of challenges. A comprehensive study published in April 2026 reveals that source files accompanying millions of submissions often contain sensitive details never intended for public view. These include passwords, API keys, private author communications, GPS coordinates, and internal notes that could compromise privacy or professional reputations.

The findings come at a time when preprints play an increasingly central role in academic publishing, particularly in physics, computer science, and mathematics. Authors upload LaTeX source files to enable reproducibility and open science, yet this practice inadvertently exposes far more than the final PDF version reveals.

Background on arXiv and Source File Practices

arXiv, established in 1991, serves as a primary platform for sharing preprints before formal peer review. In fields that rely heavily on LaTeX for document preparation, the repository requires authors to provide source files alongside the rendered PDF. This policy supports transparency and allows others to examine the underlying code or data processing steps.

However, LaTeX files function similarly to programming code. They frequently include comments that do not appear in the final document but remain visible in the source. Additional files such as images with embedded metadata, auxiliary scripts, or even entire project folders can accompany submissions. Over time, these elements accumulate across multiple versions of a preprint, creating a persistent record that extends well beyond what authors typically review before upload.

The Landmark Study and Its Scope

The primary research, titled Hidden Secrets in the arXiv, examined approximately 2.7 million submissions representing 93 percent of available preprints up to December 2025. Led by Jan Pennekamp of RWTH Aachen University, the team analyzed three main categories of potential disclosure: unnecessary or dangling files, embedded metadata in images and documents, and irrelevant content such as LaTeX comments.

Results indicated that nearly every submission contained some form of hidden information. Among those with LaTeX sources, 88 percent included material the authors likely did not intend to share publicly. The study identified complete Git histories, editable web document links, and numerous instances of credential-like strings.

A companion analysis of 100,000 submissions reached similar conclusions through different methods, highlighting thousands of personally identifiable information leaks and hundreds of credential exposures. These parallel efforts underscore the systemic nature of the issue rather than isolated incidents.

Types of Unintended Content Discovered

The disclosures span a wide range. Private conversations between co-authors appeared frequently, including disagreements, profane remarks about competitors, and to-do lists noting weaknesses in the research that were never addressed in the published text. Such notes can reveal internal dynamics or unresolved questions that authors preferred to keep confidential.

Technical leaks proved equally concerning. Researchers found 265 API keys, 4 private keys, and 171 passwords across the dataset. GPS-tagged images appeared in 7,326 submissions, with 235 cases showing coordinates consistent with both workplace and residential locations. A spot check confirmed that nine out of ten such examples pinpointed researchers' home addresses.

Additional exposures included 699 Google Docs links granting open editing access, some leading to peer reviews, meeting minutes, or even participant survey data from human subjects studies. In several instances, these links connected to materials clearly marked as confidential.

Photo by Zulfugar Karimov on Unsplash

Impacts on Researchers and Institutions

The consequences extend beyond technical inconvenience. An embarrassing comment or private note surfacing publicly can damage reputations, especially when amplified through social media. Sensitive location data raises personal safety considerations, while exposed credentials create opportunities for unauthorized access to research accounts or cloud services.

Institutions may face liability if leaked materials involve student data, grant-related information, or collaborative projects with industry partners. The persistence of all preprint versions on arXiv means that even corrected or withdrawn submissions leave traces that remain accessible indefinitely.

Survey responses from affected authors highlighted a key gap in awareness. Only 41 percent of those contacted realized that arXiv publishes source files alongside PDFs. Many assumed the repository behaved like a traditional journal, where only the final formatted document becomes public.

Comparison with Related Findings in Other Platforms

Similar issues have surfaced in other public repositories. Analyses of GitHub code repositories have documented credential leakage, though developers there generally understand the public nature of their work. The arXiv context differs because researchers often treat source files as internal working documents rather than publishable artifacts.

Earlier studies on arXiv itself, including one examining 600,000 preprints for residual data and another using language models on 100,000 submissions, identified comparable patterns of undisclosed details and sensitive statements. The convergence of these independent investigations strengthens the case for systemic change.

Current Tools and Their Limitations

Several utilities exist to strip comments and metadata from LaTeX sources. Yet the primary study demonstrated that these tools frequently fail to catch all problematic elements, particularly across complex multi-file submissions or when auxiliary data files remain attached.

arXiv provides high-level guidance on its site recommending that authors clean their sources, placing responsibility squarely on individuals. While this approach aligns with open science principles, it leaves many researchers without adequate practical support or automated safeguards.

Recommendations and Emerging Solutions

Experts advocate for improved author education during the upload process. Clearer warnings, interactive checklists, and integrated cleaning tools could reduce accidental disclosures significantly. Repository operators might consider optional source-file sanitization features that preserve essential reproducibility elements while removing comments and unnecessary attachments.

Researchers can adopt proactive habits such as compiling clean source archives before submission, reviewing all accompanying files individually, and avoiding the upload of version-control histories or draft directories. Institutions could incorporate training modules on digital hygiene into research integrity programs.

The development of more robust automated cleaners, including one proposed in the main study called ALC-NG, offers promise for comprehensive removal of non-essential content while maintaining the ability to reproduce the paper.

Photo by Zulfugar Karimov on Unsplash

Broader Implications for Open Science

The situation highlights a tension at the heart of open science initiatives. Greater transparency accelerates discovery and verification, yet it also amplifies the risks associated with incomplete data hygiene. Balancing these priorities requires ongoing dialogue among repositories, funders, publishers, and the research community.

As preprint adoption continues to grow across disciplines, the lessons from arXiv will likely influence policies at other servers. Proactive measures today can help preserve trust in open dissemination practices for years to come.

Future Outlook and Community Response

arXiv has acknowledged the issue in its documentation, emphasizing author responsibility. Community discussions following the study's presentation at the IEEE Symposium on Security and Privacy suggest growing recognition that technical solutions and cultural shifts must proceed together.

Future updates to preprint platforms may include enhanced metadata controls or automated scanning for common leakage patterns. In the meantime, individual vigilance remains the most immediate defense.

Researchers interested in related career resources on navigating academic publishing and digital best practices can explore opportunities through specialized job platforms focused on higher education and research roles.