Logic Hijacking of RAG: Single-Document Poisoning via Local Optimization
Single-document corpus poisoning under black-box access poses a severe threat to Retrieval-Augmented Generation (RAG). However, existing attacks predominantly rely on explicit factual refutations or imperative instruction overrides. Modern aligned LLMs often arbitrate such conflicts conservatively, rejecting overt cont...
Hang-Yi Zhao, Bo-Nan Zhang, Fu-Sen Guo et al.
· 0 citations