Cover Image

Poison-RAG: Adversarial Data Poisoning Attacks on Retrieval-Augmented Generation in Recommender Systems

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Nazary, Fatemeh, Deldjoo, Yashar, di Noia, Tommaso
Format:	Preprint
Published:	2025
Subjects:	Information Retrieval
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

Stealthy LLM-Driven Data Poisoning Attacks Against Embedding-Based Retrieval-Augmented Recommender Systems
by: Nazary, Fatemeh, et al.
Published: (2025)

RAG-VisualRec: An Open Resource for Vision- and Text-Enhanced Retrieval-Augmented Generation in Recommendation
by: Tourani, Ali, et al.
Published: (2025)

ViLLA-MMBench: A Unified Benchmark Suite for LLM-Augmented Multimodal Movie Recommendation
by: Nazary, Fatemeh, et al.
Published: (2025)

CFaiRLLM: Consumer Fairness Evaluation in Large-Language Model Recommender System
by: Deldjoo, Yashar, et al.
Published: (2024)

A Normative Framework for Benchmarking Consumer Fairness in Large Language Model Recommender System
by: Deldjoo, Yashar, et al.
Published: (2024)

AirTOWN: A Privacy-Preserving Mobile App for Real-time Pollution-Aware POI Suggestion
by: Fasano, Giuseppe, et al.
Published: (2025)

Towards More Robust Retrieval-Augmented Generation: Evaluating RAG Under Adversarial Poisoning Attacks
by: Su, Jinyan, et al.
Published: (2024)

PoisonArena: Uncovering Competing Poisoning Attacks in Retrieval-Augmented Generation
by: Chen, Liuji, et al.
Published: (2025)

Understanding Biases in ChatGPT-based Recommender Systems: Provider Fairness, Temporal Stability, and Recency
by: Deldjoo, Yashar
Published: (2024)

Retrieval-Augmented Review Generation for Poisoning Recommender Systems
by: Yang, Shiyi, et al.
Published: (2025)

The Future is Agentic: Definitions, Perspectives, and Open Challenges of Multi-Agent Recommender Systems
by: Maragheh, Reza Yousefi, et al.
Published: (2025)

Traceback of Poisoning Attacks to Retrieval-Augmented Generation
by: Zhang, Baolei, et al.
Published: (2025)

Agentic Personalized Fashion Recommendation in the Age of Generative AI: Challenges, Opportunities, and Evaluation
by: Deldjoo, Yashar, et al.
Published: (2025)

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems
by: Song, Hongru, et al.
Published: (2025)

Poisoning Attacks against Recommender Systems: A Survey
by: Wang, Zongwei, et al.
Published: (2024)

Practical Poisoning Attacks against Retrieval-Augmented Generation
by: Zhang, Baolei, et al.
Published: (2025)

Secure Retrieval-Augmented Generation against Poisoning Attacks
by: Cheng, Zirui, et al.
Published: (2025)

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation
by: Zhang, Baolei, et al.
Published: (2025)

Defending Against Knowledge Poisoning Attacks During Retrieval-Augmented Generation
by: Edemacu, Kennedy, et al.
Published: (2025)

Accelerating the Surrogate Retraining for Poisoning Attacks against Recommender Systems
by: Wu, Yunfan, et al.
Published: (2024)

Poisoning Attacks and Defenses in Recommender Systems: A Survey
by: Wang, Zongwei, et al.
Published: (2024)

Robust Federated Contrastive Recommender System against Model Poisoning Attack
by: Yuan, Wei, et al.
Published: (2024)

Document Screenshot Retrievers are Vulnerable to Pixel Poisoning Attacks
by: Zhuang, Shengyao, et al.
Published: (2025)

Use of Air Quality Sensor Network Data for Real-time Pollution-Aware POI Suggestion
by: Fasano, Giuseppe, et al.
Published: (2025)

Diversity-aware Dual-promotion Poisoning Attack on Sequential Recommendation
by: Zhao, Yuchuan, et al.
Published: (2025)

XAI4LLM. Let Machine Learning Models and LLMs Collaborate for Enhanced In-Context Learning in Healthcare
by: Nazary, Fatemeh, et al.
Published: (2024)

RAGPart & RAGMask: Retrieval-Stage Defenses Against Corpus Poisoning in Retrieval-Augmented Generation
by: Pathmanathan, Pankayaraj, et al.
Published: (2025)

AdversarialCoT: Single-Document Retrieval Poisoning for LLM Reasoning
by: Song, Hongru, et al.
Published: (2026)

Unveiling Vulnerabilities of Contrastive Recommender Systems to Poisoning Attacks
by: Wang, Zongwei, et al.
Published: (2023)

Sharpness-Aware Poisoning: Enhancing Transferability of Injective Attacks on Recommender Systems
by: Xie, Junsong, et al.
Published: (2026)

A Personalized Framework for Consumer and Producer Group Fairness Optimization in Recommender Systems
by: Rahmani, Hossein A., et al.
Published: (2024)

Understanding Language Modeling Paradigm Adaptations in Recommender Systems: Lessons Learned and Open Challenges
by: Zhang, Lemei, et al.
Published: (2024)

Addressing Corpus Knowledge Poisoning Attacks on RAG Using Sparse Attention
by: Dekel, Sagie, et al.
Published: (2026)

Manipulating Recommender Systems: A Survey of Poisoning Attacks and Countermeasures
by: Nguyen, Thanh Toan, et al.
Published: (2024)

Toward Holistic Evaluation of Recommender Systems Powered by Generative Models
by: Deldjoo, Yashar, et al.
Published: (2025)

FlippedRAG: Black-Box Opinion Manipulation Adversarial Attacks to Retrieval-Augmented Generation Models
by: Chen, Zhuo, et al.
Published: (2025)

Robust Aggregation for Federated Sequential Recommendation with Sparse and Poisoned Data
by: Nguyen, Minh Hieu
Published: (2026)

TRACE: A Conversational Framework for Sustainable Tourism Recommendation with Agentic Counterfactual Explanations
by: Banerjee, Ashmi, et al.
Published: (2026)

Unsupervised Corpus Poisoning Attacks in Continuous Space for Dense Retrieval
by: Li, Yongkang, et al.
Published: (2025)

Reproducing HotFlip for Corpus Poisoning Attacks in Dense Retrieval
by: Li, Yongkang, et al.
Published: (2025)