Preprint
Sep 2026
ToxicRAG: Compromising Retrieval-Augmented Generation Systems via Single-Shot Knowledge Poisoning Attacks
ToxicRAG is presented, a one-document-per-target attack that expresses misinformation as a coherent knowledge-update narrative that matches or exceeds the strongest evaluated baseline in every combination of dataset--model combinations.
Hao-Zhe Lu, Jia-Qiang Li, Xin-Yuan Zhu et al.
· 0 citations