{"total":38,"rows":[{"id":"2402.07867","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","created":"2024-02-12","cited_by_count":267,"area":"rag"},{"id":"2406.00083","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","created":"2024-06-03","cited_by_count":86,"area":"rag"},{"id":"2402.17840","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","created":"2024-02-27","cited_by_count":76,"area":"rag"},{"id":"2512.16962","title":"MemoryGraft: Persistent Compromise of LLM Agents via Poisoned Experience Retrieval","created":"2025-12-18","cited_by_count":72,"area":"rag"},{"id":"2402.08416","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","created":"2024-02-13","cited_by_count":64,"area":"rag"},{"id":"2404.17196","title":"Human-Imperceptible Retrieval Poisoning Attacks in LLM-Powered Applications","created":"2024-04-26","cited_by_count":33,"area":"rag"},{"id":"2408.04870","title":"ConfusedPilot: Confused Deputy Risks in RAG-based LLMs","created":"2024-08-09","cited_by_count":22,"area":"rag"},{"id":"2504.09593","title":"ControlNET: A Firewall for RAG-based LLM System","created":"2025-04-13","cited_by_count":12,"area":"rag"},{"id":"2509.13772","title":"Who Taught the Lie? Responsibility Attribution for Poisoned Knowledge in Retrieval-Augmented Generation","created":"2025-09-17","cited_by_count":12,"area":"rag"},{"id":"2407.13757","title":"Black-Box Opinion Manipulation Attacks to Retrieval-Augmented Generation of Large Language Models","created":"2024-07-18","cited_by_count":11,"area":"rag"},{"id":"2505.18583","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","created":"2025-05-24","cited_by_count":10,"area":"rag"},{"id":"2505.05196","title":"Stealthy LLM-Driven Data Poisoning Attacks Against Embedding-Based Retrieval-Augmented Recommender Systems","created":"2025-05-08","cited_by_count":8,"area":"rag"},{"id":"2509.15159","title":"AIP: Subverting Retrieval-Augmented Generation via Adversarial Instructional Prompt","created":"2025-09-18","cited_by_count":5,"area":"rag"},{"id":"2511.15759","title":"Securing AI Agents Against Prompt Injection Attacks","created":"2025-11-19","cited_by_count":5,"area":"rag"},{"id":"2402.14480","title":"MeTMaP: Metamorphic Testing for Detecting False Vector Matching Problems in LLM Augmented Generation","created":"2024-02-22","cited_by_count":4,"area":"rag"},{"id":"2512.08289","title":"MIRAGE: Misleading Retrieval-Augmented Generation via Black-box and Query-agnostic Poisoning Attacks","created":"2025-12-09","cited_by_count":4,"area":"rag"},{"id":"2601.11199","title":"SD-RAG: A Prompt-Injection-Resilient Framework for Selective Disclosure in Retrieval-Augmented Generation","created":"2026-01-16","cited_by_count":4,"area":"rag"},{"id":"2603.21654","title":"Towards Secure Retrieval-Augmented Generation: A Comprehensive Review of Threats, Defenses and Benchmarks","created":"2026-03-23","cited_by_count":4,"area":"rag"},{"id":"2504.21680","title":"Hoist with His Own Petard: Inducing Guardrails to Facilitate Denial-of-Service Attacks on Retrieval-Augmented Generation of LLMs","created":"2025-04-30","cited_by_count":3,"area":"rag"},{"id":"2508.18652","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","created":"2025-08-26","cited_by_count":3,"area":"rag"},{"id":"2512.01335","title":"EmoRAG: Evaluating RAG Robustness to Symbolic Perturbations","created":"2025-12-01","cited_by_count":3,"area":"rag"},{"id":"2602.06268","title":"MPIB: A Benchmark for Medical Prompt Injection Attacks and Clinical Safety in LLMs","created":"2026-02-06","cited_by_count":3,"area":"rag"},{"id":"2602.14374","title":"Differentially Private Retrieval-Augmented Generation","created":"2026-02-16","cited_by_count":2,"area":"rag"},{"id":"2601.15528","title":"Securing LLM-as-a-Service for Small Businesses: An Industry Case Study of a Distributed Chatbot Deployment Platform","created":"2026-01-21","cited_by_count":1,"area":"rag"},{"id":"2603.25164","title":"PIDP-Attack: Combining Prompt Injection with Database Poisoning Attacks on Retrieval-Augmented Generation Systems","created":"2026-03-26","cited_by_count":1,"area":"rag"},{"id":"2605.00505","title":"LLM-Oriented Information Retrieval: A Denoising-First Perspective","created":"2026-05-01","cited_by_count":1,"area":"rag"},{"id":"2605.29491","title":"The Curse of Helpfulness: Inverse Scaling Law in Robustness to Distractor Instructions via DistractionIF","created":"2026-05-28","cited_by_count":1,"area":"rag"},{"id":"2606.09005","title":"Document-Authored Control-Signal Impersonation: A Low-Cost Indirect Prompt Attack on RAG Safety Boundaries","created":"2026-06-08","cited_by_count":1,"area":"rag"},{"id":"2508.01084","title":"Provably Secure Retrieval-Augmented Generation","created":"2025-08-01","cited_by_count":0,"area":"rag"},{"id":"2603.17292","title":"SEAL-Tag: Self-Tag Evidence Aggregation with Probabilistic Circuits for PII-Safe Retrieval-Augmented Generation","created":"2026-03-18","cited_by_count":0,"area":"rag"},{"id":"2604.18663","title":"Beyond Explicit Refusals: Soft-Failure Attacks on Retrieval-Augmented Generation","created":"2026-04-20","cited_by_count":0,"area":"rag"},{"id":"2604.28157","title":"FlashRT: Towards Computationally and Memory Efficient Red-Teaming for Prompt Injection and Knowledge Corruption","created":"2026-04-30","cited_by_count":0,"area":"rag"},{"id":"2605.01078","title":"A Sentence Relation-Based Approach to Sanitizing Malicious Instructions","created":"2026-05-01","cited_by_count":0,"area":"rag"},{"id":"2605.11217","title":"Training-Free Refusal of MCP Exploits via Retrieval-Augmented Generation","created":"2026-05-11","cited_by_count":0,"area":"rag"},{"id":"2609.00479","title":"EGT-KG: Evidence-Grounded Typed KG Retrieval for Practical Scientific QA with Small Language Models","created":"2026-08-31","cited_by_count":0,"area":"rag"},{"id":"2609.11082","title":"ToxicRAG: Compromising Retrieval-Augmented Generation Systems via Single-Shot Knowledge Poisoning Attacks","created":"2026-09-10","cited_by_count":0,"area":"rag"},{"id":"2609.16818","title":"InceptionRAG: Stealthy Poisoning Attack Against Retrieval-Augmented Generation","created":"2026-09-15","cited_by_count":0,"area":"rag"},{"id":"2610.19549","title":"GraphRAG-LTM: A Layered Threat Modeling Framework for Attacks on Graph Retrieval-Augmented Generation","created":"2026-10-14","cited_by_count":0,"area":"rag"}],"next_cursor":null}