Cover Image

MIRAGE: Misleading Retrieval-Augmented Generation via Black-box and Query-agnostic Poisoning Attacks

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Chen, Tailun, He, Yu, Wang, Yan, Shao, Shuo, Zheng, Haolun, Liu, Zhihao, Li, Jinfeng, Qin, Zhizhen, Chen, Yuefeng, Chu, Zhixuan, Qin, Zhan, Ren, Kui
Format:	Preprint
Published:	2025
Subjects:	Cryptography and Security
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

JANUS: A Lightweight Framework for Jailbreaking Text-to-Image Models via Distribution Optimization
by: Zheng, Haolun, et al.
Published: (2026)

Towards Mitigating Excessive Forgetting in LLM Unlearning via Entanglement-Guidance with Proxy Constraint
by: Liu, Zhihao, et al.
Published: (2025)

Prompt-Consistency Image Generation (PCIG): A Unified Framework Integrating LLMs, Knowledge Graphs, and Controllable Diffusion Models
by: Sun, Yichen, et al.
Published: (2024)

CtrlRAG: Black-box Document Poisoning Attacks for Retrieval-Augmented Generation of Large Language Models
by: Sui, Runqi
Published: (2025)

External Data Extraction Attacks against Retrieval-Augmented Large Language Models
by: He, Yu, et al.
Published: (2025)

Reading Between the Lines: Towards Reliable Black-box LLM Fingerprinting via Zeroth-order Gradient Estimation
by: Shao, Shuo, et al.
Published: (2025)

Defense against Poisoning Attacks under Shuffle-DP
by: Wang, Siyi, et al.
Published: (2026)

Membership Inference Attacks Against Vision-Language Models
by: Hu, Yuke, et al.
Published: (2025)

A Causal Explainable Guardrails for Large Language Models
by: Chu, Zhixuan, et al.
Published: (2024)

LLM-Guided Multi-View Hypergraph Learning for Human-Centric Explainable Recommendation
by: Chu, Zhixuan, et al.
Published: (2024)

LogicPoison: Logical Attacks on Graph Retrieval-Augmented Generation
by: Xiao, Yilin, et al.
Published: (2026)

PoisonArena: Uncovering Competing Poisoning Attacks in Retrieval-Augmented Generation
by: Chen, Liuji, et al.
Published: (2025)

Practical Poisoning Attacks against Retrieval-Augmented Generation
by: Zhang, Baolei, et al.
Published: (2025)

Traceback of Poisoning Attacks to Retrieval-Augmented Generation
by: Zhang, Baolei, et al.
Published: (2025)

Sora Detector: A Unified Hallucination Detection for Large Text-to-Video Models
by: Chu, Zhixuan, et al.
Published: (2024)

Poisoned-MRAG: Knowledge Poisoning Attacks to Multimodal Retrieval Augmented Generation
by: Liu, Yinuo, et al.
Published: (2025)

Query Provenance Analysis: Efficient and Robust Defense against Query-based Black-box Attacks
by: Li, Shaofei, et al.
Published: (2024)

ZQBA: Zero Query Black-box Adversarial Attack
by: Costa, Joana C., et al.
Published: (2025)

DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation
by: Gong, Yuyang, et al.
Published: (2026)

RAG Safety: Exploring Knowledge Poisoning Attacks to Retrieval-Augmented Generation
by: Zhao, Tianzhe, et al.
Published: (2025)

REFINE: Inversion-Free Backdoor Defense via Model Reprogramming
by: Chen, Yukun, et al.
Published: (2025)

Secure Retrieval-Augmented Generation against Poisoning Attacks
by: Cheng, Zirui, et al.
Published: (2025)

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation
by: Zhang, Baolei, et al.
Published: (2025)

Explanation as a Watermark: Towards Harmless and Multi-bit Model Ownership Verification via Watermarking Feature Attribution
by: Shao, Shuo, et al.
Published: (2024)

Online Poisoning Attack Against Reinforcement Learning under Black-box Environments
by: Li, Jianhui, et al.
Published: (2024)

KEPo: Knowledge Evolution Poison on Graph-based Retrieval-Augmented Generation
by: Chen, Qizhi, et al.
Published: (2026)

MIRAGE: A Metric-Intensive Benchmark for Retrieval-Augmented Generation Evaluation
by: Park, Chanhee, et al.
Published: (2025)

LoopTrap: Termination Poisoning Attacks on LLM Agents
by: Xu, Huiyu, et al.
Published: (2026)

Poison-RAG: Adversarial Data Poisoning Attacks on Retrieval-Augmented Generation in Recommender Systems
by: Nazary, Fatemeh, et al.
Published: (2025)

Data Extraction Attacks in Retrieval-Augmented Generation via Backdoors
by: Peng, Yuefeng, et al.
Published: (2024)

PICOs-RAG: PICO-supported Query Rewriting for Retrieval-Augmented Generation in Evidence-Based Medicine
by: Sun, Mengzhou, et al.
Published: (2025)

ContextCache: Context-Aware Semantic Cache for Multi-Turn Queries in Large Language Models
by: Yan, Jianxin, et al.
Published: (2025)

"Someone Hid It": Query-Agnostic Black-Box Attacks on LLM-Based Retrieval
by: Li, Jiate, et al.
Published: (2026)

SEA: Shareable and Explainable Attribution for Query-based Black-box Attacks
by: Gao, Yue, et al.
Published: (2023)

Hard-label based Small Query Black-box Adversarial Attack
by: Park, Jeonghwan, et al.
Published: (2024)

MIRAGE-Bench: Automatic Multilingual Benchmark Arena for Retrieval-Augmented Generation Systems
by: Thakur, Nandan, et al.
Published: (2024)

MIRAGE: Model-agnostic Industrial Realistic Anomaly Generation and Evaluation for Visual Anomaly Detection
by: Hu, Jinwei, et al.
Published: (2026)

Distributed Black-box Attack: Do Not Overestimate Black-box Attacks
by: Wu, Han, et al.
Published: (2022)

Hidden in the Metadata: Stealth Poisoning Attacks on Multimodal Retrieval-Augmented Generation
by: Edemacu, Kennedy, et al.
Published: (2026)

Knowledge Poisoning Attacks on Medical Multi-Modal Retrieval-Augmented Generation
by: Yang, Peiru, et al.
Published: (2026)