arXiv cs.CR·17d agoToxicRAG: Compromising Retrieval-Augmented Generation Systems via Single-Shot Knowledge Poisoning Attacks#data-poisoning#knowledge-poisoning#llm-securityAI safety & security1