{"total":59,"rows":[{"id":"2402.07867","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","created":"2024-02-12","cited_by_count":267,"area":"rag"},{"id":"2406.05870","title":"Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker Documents","created":"2024-06-09","cited_by_count":102,"area":"rag"},{"id":"2406.00083","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","created":"2024-06-03","cited_by_count":86,"area":"rag"},{"id":"2406.00799","title":"Get my drift? Catching LLM Task Drift with Activation Deltas","created":"2024-06-02","cited_by_count":72,"area":"rag"},{"id":"2402.08416","title":"Pandora: Jailbreak GPTs by Retrieval Augmented Generation Poisoning","created":"2024-02-13","cited_by_count":64,"area":"rag"},{"id":"2406.19417","title":"\"Glue pizza and eat rocks\" -- Exploiting Vulnerabilities in Retrieval-Augmented Generative Models","created":"2024-06-26","cited_by_count":60,"area":"rag"},{"id":"2405.20485","title":"Phantom: General Backdoor Attacks on Retrieval Augmented Language Generation","created":"2024-05-30","cited_by_count":49,"area":"rag"},{"id":"2411.14110","title":"Feedback-Guided Extraction of Knowledge Base from Retrieval-Augmented LLM Applications","created":"2024-11-21","cited_by_count":37,"area":"rag"},{"id":"2404.17196","title":"Human-Imperceptible Retrieval Poisoning Attacks in LLM-Powered Applications","created":"2024-04-26","cited_by_count":33,"area":"rag"},{"id":"2504.07717","title":"PR-Attack: Coordinated Prompt-RAG Attacks on Retrieval-Augmented Generation in Large Language Models via Bilevel Optimization","created":"2025-04-10","cited_by_count":32,"area":"rag"},{"id":"2501.14050","title":"GraphRAG under Fire","created":"2025-01-23","cited_by_count":24,"area":"rag"},{"id":"2504.18041","title":"RAG LLMs are Not Safer: A Safety Analysis of Retrieval-Augmented Generation for Large Language Models","created":"2025-04-25","cited_by_count":24,"area":"rag"},{"id":"2406.05087","title":"Corpus Poisoning via Approximate Greedy Gradient Descent","created":"2024-06-07","cited_by_count":21,"area":"rag"},{"id":"2412.20953","title":"GASLITEing the Retrieval: Exploring Vulnerabilities in Dense Embedding-based Search","created":"2024-12-30","cited_by_count":20,"area":"rag"},{"id":"2402.07179","title":"Prompt Perturbation in Retrieval-Augmented Generation based Large Language Models","created":"2024-02-11","cited_by_count":18,"area":"rag"},{"id":"2408.05025","title":"Rag and Roll: An End-to-End Evaluation of Indirect Prompt Manipulations in LLM-based Application Frameworks","created":"2024-08-09","cited_by_count":17,"area":"rag"},{"id":"2505.19864","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","created":"2025-05-26","cited_by_count":17,"area":"rag"},{"id":"2506.06151","title":"Joint-GCG: Unified Gradient-Based Poisoning Attacks on Retrieval-Augmented Generation Systems","created":"2025-06-06","cited_by_count":16,"area":"rag"},{"id":"2505.18583","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","created":"2025-05-24","cited_by_count":10,"area":"rag"},{"id":"2510.13842","title":"ADMIT: Few-shot Knowledge Poisoning Attacks on RAG-based Fact Checking","created":"2025-10-11","cited_by_count":10,"area":"rag"},{"id":"2502.03233","title":"Exploring the Security Threats of Knowledge Base Poisoning in Retrieval-Augmented Code Generation","created":"2025-02-05","cited_by_count":9,"area":"rag"},{"id":"2509.22486","title":"Your RAG is Unfair: Exposing Fairness Vulnerabilities in Retrieval-Augmented Generation via Backdoor Attacks","created":"2025-09-26","cited_by_count":8,"area":"rag"},{"id":"2508.03793","title":"AttnTrace: Contextual Attribution of Prompt Injection and Knowledge Corruption","created":"2025-08-05","cited_by_count":7,"area":"rag"},{"id":"2510.21144","title":"NeuroGenPoisoning: Neuron-Guided Attacks on Retrieval-Augmented Generation of LLM via Genetic Optimization of External Knowledge","created":"2025-10-24","cited_by_count":7,"area":"rag"},{"id":"2505.06579","title":"POISONCRAFT: Practical Poisoning of Retrieval-Augmented Generation for Large Language Models","created":"2025-05-10","cited_by_count":6,"area":"rag"},{"id":"2509.03787","title":"Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain","created":"2025-09-04","cited_by_count":6,"area":"rag"},{"id":"2503.06950","title":"CtrlRAG: Black-box Document Poisoning Attacks for Retrieval-Augmented Generation of Large Language Models","created":"2025-03-10","cited_by_count":5,"area":"rag"},{"id":"2505.12574","title":"Uncovering Competing Poisoning Attacks in Retrieval-Augmented Generation","created":"2025-05-18","cited_by_count":5,"area":"rag"},{"id":"2507.18202","title":"Safeguarding RAG Pipelines with GMTP: A Gradient-based Masked Token Probability Method for Poisoned Document Detection","created":"2025-07-24","cited_by_count":5,"area":"rag"},{"id":"2509.07941","title":"ImportSnare: Directed \"Code Manual\" Hijacking in Retrieval-Augmented Code Generation","created":"2025-09-09","cited_by_count":5,"area":"rag"},{"id":"2505.13506","title":"EcoSafeRAG: Efficient Security through Context Analysis in Retrieval-Augmented Generation","created":"2025-05-16","cited_by_count":4,"area":"rag"},{"id":"2510.11195","title":"RAG-Pull: Turning Retrieval into a Code-Injection Channel via Invisible Unicode Perturbations","created":"2025-10-13","cited_by_count":4,"area":"rag"},{"id":"2512.08289","title":"MIRAGE: Misleading Retrieval-Augmented Generation via Black-box and Query-agnostic Poisoning Attacks","created":"2025-12-09","cited_by_count":4,"area":"rag"},{"id":"2603.03919","title":"When Safety Becomes a Vulnerability: Exploiting LLM Alignment Homogeneity for Transferable Blocking in RAG","created":"2026-03-04","cited_by_count":4,"area":"rag"},{"id":"2504.21680","title":"Hoist with His Own Petard: Inducing Guardrails to Facilitate Denial-of-Service Attacks on Retrieval-Augmented Generation of LLMs","created":"2025-04-30","cited_by_count":3,"area":"rag"},{"id":"2506.04390","title":"Through the Stealth Lens: Attention-Aware Defenses Against Poisoning in RAG","created":"2025-06-04","cited_by_count":3,"area":"rag"},{"id":"2508.18652","title":"UniC-RAG: Universal Knowledge Corruption Attacks to Retrieval-Augmented Generation","created":"2025-08-26","cited_by_count":3,"area":"rag"},{"id":"2602.06268","title":"MPIB: A Benchmark for Medical Prompt Injection Attacks and Clinical Safety in LLMs","created":"2026-02-06","cited_by_count":3,"area":"rag"},{"id":"2510.02964","title":"External Data Extraction Attacks against Retrieval-Augmented Large Language Models","created":"2025-10-03","cited_by_count":2,"area":"rag"},{"id":"2605.27157","title":"Detecting Is Not Resolving: The Monitoring Control Gap in Retrieval Augmented LLMs","created":"2026-05-26","cited_by_count":2,"area":"rag"},{"id":"2409.15461","title":"RAM2C: A Liberal Arts Educational Chatbot based on Retrieval-augmented Multi-role Multi-expert Collaboration","created":"2024-09-23","cited_by_count":1,"area":"rag"},{"id":"2504.00389","title":"CyberBOT: Towards Reliable Cybersecurity Education via Ontology-Grounded Retrieval Augmented Generation","created":"2025-04-01","cited_by_count":1,"area":"rag"},{"id":"2510.00586","title":"Eyes-on-Me: Scalable RAG Poisoning through Transferable Attention-Steering Attractors","created":"2025-10-01","cited_by_count":1,"area":"rag"},{"id":"2510.10452","title":"Steering Over-refusals Towards Safety in Retrieval Augmented Generation","created":"2025-10-12","cited_by_count":1,"area":"rag"},{"id":"2603.18034","title":"Semantic Chameleon: Corpus-Dependent Poisoning Attacks and Defenses in RAG Systems","created":"2026-03-10","cited_by_count":1,"area":"rag"},{"id":"2603.25164","title":"PIDP-Attack: Combining Prompt Injection with Database Poisoning Attacks on Retrieval-Augmented Generation Systems","created":"2026-03-26","cited_by_count":1,"area":"rag"},{"id":"2606.19692","title":"When Global Gating Is Enough: Admission-Time Hubness Control in Anisotropic Vector Retrieval Systems","created":"2026-06-18","cited_by_count":1,"area":"rag"},{"id":"2608.24977","title":"Retrieved But Not Reliable: A Survey on Attacks, and Defenses in Retrieval-Augmented Generation","created":"2026-08-25","cited_by_count":1,"area":"rag"},{"id":"2508.02296","title":"Knowing When Not to Answer: Lightweight KB-Aligned OOD Detection for Safe RAG","created":"2025-08-04","cited_by_count":0,"area":"rag"},{"id":"2603.17176","title":"Towards Unsupervised Adversarial Document Detection in Retrieval Augmented Generation Systems","created":"2026-03-17","cited_by_count":0,"area":"rag"},{"id":"2604.28157","title":"FlashRT: Towards Computationally and Memory Efficient Red-Teaming for Prompt Injection and Knowledge Corruption","created":"2026-04-30","cited_by_count":0,"area":"rag"},{"id":"2605.11217","title":"Training-Free Refusal of MCP Exploits via Retrieval-Augmented Generation","created":"2026-05-11","cited_by_count":0,"area":"rag"},{"id":"2605.17034","title":"Privacy Policy Enforcement Guardrails for Data-Sensitive Retrieval-Augmented Generation","created":"2026-05-16","cited_by_count":0,"area":"rag"},{"id":"2606.03354","title":"ImageAuditor: Membership Inference Attack against Image-based Retrieval-Augmented Generation","created":"2026-06-02","cited_by_count":0,"area":"rag"},{"id":"2606.26793","title":"MIRROR: Novelty-Constrained Memory-Guided MCTS Red-Teaming for Agentic RAG","created":"2026-06-25","cited_by_count":0,"area":"rag"},{"id":"2607.17535","title":"Salience Induction against Multi-Hop RAG Agents: Threat and Defense","created":"2026-07-20","cited_by_count":0,"area":"rag"},{"id":"2607.23838","title":"TriShieldRAG: 3 Rings, One Blind Spot in Layered Defenses for Retrieval-Augmented Generation","created":"2026-07-26","cited_by_count":0,"area":"rag"},{"id":"2608.04286","title":"Eliciting Intrinsic Hallucinations in LLMs via Semantically Equivalent Adversarial Attacks","created":"2026-08-04","cited_by_count":0,"area":"rag"},{"id":"2609.25469","title":"RAG-NAROK: Retrieval-Aware Knowledge Corpus Poisoning in RAG with Source-specific Refutation","created":"2026-09-21","cited_by_count":0,"area":"rag"}],"next_cursor":null}