CodePoisonRAG: Knowledge Poisoning Attacks on Retrieval-Augmented Code Generation
This work introduces CodePoisonRAG, a targeted upstream knowledge-poisoning framework that transforms benign fixed-code entries into poisoned artifacts and shows that RACG poisoning extends beyond the incidental propagation of existing vulnerabilities to the targeted construction and propagation of attacker-selected we...