Fairness Testing in Retrieval-Augmented Generation: How Small Perturbations Reveal Bias in Small Language Models
On the map: Retrieval-augmented generation → RAG robustness and adaptive retrieval
also in 1 more
Abstract (arXiv)
Large Language Models (LLMs) are widely used across multiple domains but continue to raise concerns regarding security and fairness. Beyond known attack vectors such as data poisoning and prompt injection, LLMs are also vulnerable to fairness bugs. These refer to unintended behaviors influenced by sensitive demographic cues (e.g., race or sexual orientation) that should not affect outcomes. Another key issue is hallucination, where models generate plausible yet false information. Retrieval-Augmented Generation (RAG) has emerged as a strategy to mitigate hallucinations by combining external retrieval with text generation. However, its adoption raises new fairness concerns, as the retrieved content itself may surface or amplify bias. This study conducts fairness testing through metamorphic testing (MT), introducing controlled demographic perturbations in prompts to assess fairness in sentiment analysis performed by three Small Language Models (SLMs) hosted on HuggingFace (Llama-3.2-3B-Instruct, Mistral-7B-Instruct-v0.3, and Llama-3.1-Nemotron-8B), each integrated into a RAG pipeline. Results show that minor demographic variations can break up to one third of metamorphic relations (MRs). A detailed analysis of these failures reveals a consistent bias hierarchy, with perturbations involving racial cues being the predominant cause of the violations. In addition to offering a comparative evaluation, this work reinforces that the retrieval component in RAG must be carefully curated to prevent bias amplification. The findings serve as a practical alert for developers, testers and small organizations aiming to adopt accessible SLMs without compromising fairness or reliability.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in RAG robustness and adaptive retrieval, one of 15 directions in Retrieval-augmented generation. Builds on 12 of its 35 references that are in the map. First posted on arXiv 30 Sep 2025.
Builds on
12 of 35 references.
Closest ancestors · 1
Same direction, newest first
Other references · 11
- 2020Dense Passage Retrieval for Open-Domain Question Answeringcited by 3,824
- 2020Approximate Nearest Neighbor Negative Contrastive Learning for Dense Text Retrievalcited by 849
- 2020Bias and Debias in Recommender System: A Survey and Future Directionscited by 240
- 2019Machine Learning Testing: Survey, Landscapes and Horizonscited by 218
- 2022Fairness Testing: A Comprehensive Survey and Analysis of Trendscited by 62
- 2024FairRAG: Fair Human Generation via Fair Retrieval Augmentationcited by 34
- 2025Benchmarking Adversarial Robustness to Bias Elicitation in Large Language Models: Scalable Automated Assessment with LLM-as-a-Judgecited by 23
- 2023MTTM: Metamorphic Testing for Textual Content Moderation Softwarecited by 22
- 2023METAL: Metamorphic Testing Framework for Analyzing Large-Language Model Qualitiescited by 20
- 2025Metamorphic Testing for Fairness Evaluation in Large Language Models: Identifying Intersectional Bias in LLaMA and GPTcited by 4
- 2025Efficient Fairness Testing in Large Language Models: Prioritizing Metamorphic Relations for Bias Detectioncited by 2
Built on by
Citing papers per year: 2026: 1.
1 paper.
Similar, not cited
Close in wording, no citation either way
- 2024No Free Lunch: Retrieval-Augmented Generation Undermines Fairness in LLMs, Even for Vigilant Users
- 2025The Other Side of the Coin: Exploring Fairness in Retrieval-Augmented Generation
- 2025Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMs
- 2024Does RAG Introduce Unfairness in LLMs? Evaluating Fairness in Retrieval-Augmented Generation Systems
- 2026Towards FairRAG: Preventing Representational Harm in Retrieval-Augmented Generation by Enforcing Fair Exposure at Retrieval Time
- 2025Bias Testing and Mitigation in Black Box LLMs using Metamorphic Relations
- 2026Evaluating Social Bias in RAG Systems: When External Context Helps and Reasoning Hurts
- 2025Your RAG is Unfair: Exposing Fairness Vulnerabilities in Retrieval-Augmented Generation via Backdoor Attacks