主题： poisoning

• Poisoned retrieval corpora: how a few planted documents can steer a RAG system's answers

  Retrieval-augmented generation trusts whatever the retriever returns. Research has shown that injecting a small number of crafted texts into a knowledge base can make a system give an attacker-chosen answer to a targeted question. Defences are about who can write to the corpus, provenance per passage and answer checks.

  article · en · reviewed · 知识截至 2026-09-23

机器可读： JSON