Cover Image

Practical Poisoning Attacks against Retrieval-Augmented Generation

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Zhang, Baolei, Chen, Yuxi, Liu, Zhuqing, Nie, Lihai, Li, Tong, Liu, Zheli, Fang, Minghong
Format:	Preprint
Published:	2025
Subjects:	Cryptography and Security Information Retrieval Machine Learning
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation
by: Zhang, Baolei, et al.
Published: (2025)

Who Taught the Lie? Responsibility Attribution for Poisoned Knowledge in Retrieval-Augmented Generation
by: Zhang, Baolei, et al.
Published: (2025)

Traceback of Poisoning Attacks to Retrieval-Augmented Generation
by: Zhang, Baolei, et al.
Published: (2025)

Secure Retrieval-Augmented Generation against Poisoning Attacks
by: Cheng, Zirui, et al.
Published: (2025)

Adversarial Attacks to Multi-Modal Models
by: Dou, Zhihao, et al.
Published: (2024)

Poisoning Federated Recommender Systems with Fake Users
by: Yin, Ming, et al.
Published: (2024)

When the Server Steps In: Calibrated Updates for Fair Federated Learning
by: Yu, Tianrun, et al.
Published: (2026)

Few-shot Model Extraction Attacks against Sequential Recommender Systems
by: Zhang, Hui, et al.
Published: (2024)

Unveiling Vulnerabilities of Contrastive Recommender Systems to Poisoning Attacks
by: Wang, Zongwei, et al.
Published: (2023)

Manipulating Recommender Systems: A Survey of Poisoning Attacks and Countermeasures
by: Nguyen, Thanh Toan, et al.
Published: (2024)

Practical Framework for Privacy-Preserving and Byzantine-robust Federated Learning
by: Zhang, Baolei, et al.
Published: (2025)

Multi-granular Adversarial Attacks against Black-box Neural Ranking Models
by: Liu, Yu-An, et al.
Published: (2024)

Differentially Private Datastore Generation for Retrieval-Augmented Inference
by: Abouelenein, Abdelrahman, et al.
Published: (2026)

Connect the Dots: Knowledge Graph-Guided Crawler Attack on Retrieval-Augmented Generation Systems
by: Yao, Mengyu, et al.
Published: (2026)

AgentPoison: Red-teaming LLM Agents via Poisoning Memory or Knowledge Bases
by: Chen, Zhaorun, et al.
Published: (2024)

Poisoning Deep Learning Based Recommender Model in Federated Learning Scenarios
by: Rong, Dazhong, et al.
Published: (2022)

Poisoning Attacks and Defenses to Federated Unlearning
by: Wang, Wenbin, et al.
Published: (2025)

Retrieval-Augmented Review Generation for Poisoning Recommender Systems
by: Yang, Shiyi, et al.
Published: (2025)

Retrieval Pivot Attacks in Hybrid RAG: Measuring and Mitigating Amplified Leakage from Vector Seeds to Graph Expansion
by: Thornton, Scott
Published: (2026)

Mask-based Membership Inference Attacks for Retrieval-Augmented Generation
by: Liu, Mingrui, et al.
Published: (2024)

DM4Steal: Diffusion Model For Link Stealing Attack On Graph Neural Networks
by: Chen, Jinyin, et al.
Published: (2024)

Your RAG is Unfair: Exposing Fairness Vulnerabilities in Retrieval-Augmented Generation via Backdoor Attacks
by: Bagwe, Gaurav, et al.
Published: (2025)

HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models
by: Zhang, Yucheng, et al.
Published: (2024)

BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models
by: Xue, Jiaqi, et al.
Published: (2024)

HGAttack: Transferable Heterogeneous Graph Adversarial Attack
by: Zhao, He, et al.
Published: (2024)

RAID: An In-Training Defense against Attribute Inference Attacks in Recommender Systems
by: Feng, Xiaohua, et al.
Published: (2025)

Fairness-Constrained Optimization Attack in Federated Learning
by: Kasyap, Harsh, et al.
Published: (2025)

Topic-FlipRAG: Topic-Orientated Adversarial Opinion Manipulation Attacks to Retrieval-Augmented Generation Models
by: Gong, Yuyang, et al.
Published: (2025)

Poisoning Attacks and Defenses in Recommender Systems: A Survey
by: Wang, Zongwei, et al.
Published: (2024)

DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation
by: Gong, Yuyang, et al.
Published: (2026)

The RAG Paradox: A Black-Box Attack Exploiting Unintentional Vulnerabilities in Retrieval-Augmented Generation Systems
by: Choi, Chanwoo, et al.
Published: (2025)

Poisoned-MRAG: Knowledge Poisoning Attacks to Multimodal Retrieval Augmented Generation
by: Liu, Yinuo, et al.
Published: (2025)

Towards Differential Privacy in Sequential Recommendation: A Noisy Graph Neural Network Approach
by: Hu, Wentao, et al.
Published: (2023)

Poisoning Decentralized Collaborative Recommender System and Its Countermeasures
by: Zheng, Ruiqi, et al.
Published: (2024)

Byzantine-Robust Federated Learning over Ring-All-Reduce Distributed Computing
by: Fang, Minghong, et al.
Published: (2025)

Riddle Me This! Stealthy Membership Inference for Retrieval-Augmented Generation
by: Naseh, Ali, et al.
Published: (2025)

How to Forget Clients in Federated Online Learning to Rank?
by: Wang, Shuyi, et al.
Published: (2024)

RobustMask: Certified Robustness against Adversarial Neural Ranking Attack via Randomized Masking
by: Liu, Jiawei, et al.
Published: (2025)

Exposing Privacy Risks in Graph Retrieval-Augmented Generation
by: Liu, Jiale, et al.
Published: (2025)

Watermarking Recommender Systems
by: Zhang, Sixiao, et al.
Published: (2024)