~ / ai-security / attacking-rag

Attacking RAG pipelines

Poisoning the retrieval store to steer answers and exfiltrate context.

Retrieval-augmented generation is only as trustworthy as its store. Poisoned documents can steer answers or leak context.

Poisoning

Explain how a crafted document ranks highly for a target query and injects instructions into the prompt.

ragllm