{"total":26,"rows":[{"id":"2402.07867","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","created":"2024-02-12","cited_by_count":267,"area":"rag"},{"id":"2406.05870","title":"Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker Documents","created":"2024-06-09","cited_by_count":102,"area":"rag"},{"id":"2406.00083","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","created":"2024-06-03","cited_by_count":86,"area":"rag"},{"id":"2402.17840","title":"Follow My Instruction and Spill the Beans: Scalable Data Extraction from Retrieval-Augmented Generation Systems","created":"2024-02-27","cited_by_count":76,"area":"rag"},{"id":"2402.08416","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","created":"2024-02-13","cited_by_count":64,"area":"rag"},{"id":"2406.19417","title":"\"Glue pizza and eat rocks\" -- Exploiting Vulnerabilities in Retrieval-Augmented Generative Models","created":"2024-06-26","cited_by_count":60,"area":"rag"},{"id":"2502.01386","title":"Topic-FlipRAG: Topic-Orientated Adversarial Opinion Manipulation Attacks to Retrieval-Augmented Generation Models","created":"2025-02-03","cited_by_count":33,"area":"rag"},{"id":"2502.06872","title":"Towards Trustworthy Retrieval Augmented Generation for Large Language Models: A Survey","created":"2025-02-08","cited_by_count":30,"area":"rag"},{"id":"2504.18041","title":"RAG LLMs are Not Safer: A Safety Analysis of Retrieval-Augmented Generation for Large Language Models","created":"2025-04-25","cited_by_count":24,"area":"rag"},{"id":"2406.18122","title":"Poisoned LangChain: Jailbreak LLMs by LangChain","created":"2024-06-26","cited_by_count":14,"area":"rag"},{"id":"2505.18583","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","created":"2025-05-24","cited_by_count":10,"area":"rag"},{"id":"2505.05196","title":"Stealthy LLM-Driven Data Poisoning Attacks Against Embedding-Based Retrieval-Augmented Recommender Systems","created":"2025-05-08","cited_by_count":8,"area":"rag"},{"id":"2507.05093","title":"The Hidden Threat in Plain Text: Attacking RAG Data Loaders","created":"2025-07-07","cited_by_count":8,"area":"rag"},{"id":"2509.03787","title":"Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain","created":"2025-09-04","cited_by_count":6,"area":"rag"},{"id":"2410.23902","title":"Responsible Retrieval Augmented Generation for Climate Decision Making from Documents","created":"2024-10-31","cited_by_count":4,"area":"rag"},{"id":"2505.13506","title":"EcoSafeRAG: Efficient Security through Context Analysis in Retrieval-Augmented Generation","created":"2025-05-16","cited_by_count":4,"area":"rag"},{"id":"2510.02964","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","created":"2025-10-03","cited_by_count":2,"area":"rag"},{"id":"2602.09319","title":"Benchmarking Knowledge-Extraction Attack and Defense on Retrieval-Augmented Generation","created":"2026-02-10","cited_by_count":2,"area":"rag"},{"id":"2605.27157","title":"Detecting Is Not Resolving: The Monitoring Control Gap in Retrieval Augmented LLMs","created":"2026-05-26","cited_by_count":2,"area":"rag"},{"id":"2508.16406","title":"Retrieval-Augmented Defense: Adaptive and Controllable Jailbreak Prevention for Large Language Models","created":"2025-08-22","cited_by_count":1,"area":"rag"},{"id":"2603.25164","title":"PIDP-Attack: Combining Prompt Injection with Database Poisoning Attacks on Retrieval-Augmented Generation Systems","created":"2026-03-26","cited_by_count":1,"area":"rag"},{"id":"2603.06025","title":"Sensitivity-Aware Retrieval-Augmented Intent Clarification","created":"2026-03-06","cited_by_count":0,"area":"rag"},{"id":"2604.07403","title":"RefineRAG: Word-Level Poisoning Attacks via Retriever-Guided Text Refinement","created":"2026-04-08","cited_by_count":0,"area":"rag"},{"id":"2605.17034","title":"Privacy Policy Enforcement Guardrails for Data-Sensitive Retrieval-Augmented Generation","created":"2026-05-16","cited_by_count":0,"area":"rag"},{"id":"2608.28389","title":"CamoDocs: A Poisoning Attack Against Retrieval-Augmented Language Models Using Camouflaged Documents","created":"2026-08-28","cited_by_count":0,"area":"rag"},{"id":"2609.11082","title":"ToxicRAG: Compromising Retrieval-Augmented Generation Systems via Single-Shot Knowledge Poisoning Attacks","created":"2026-09-10","cited_by_count":0,"area":"rag"}],"next_cursor":null}