P. Yang, “MrM: Black-Box Membership Inference Attacks Against Multimodal RAG Systems”, AAAI, vol. 40, no. 40, pp. 34295–34303, Mar. 2026.