Signed knowledge packs miss poisoned offline RAG updates on Pi 5
A validly signed poisoned pack zeroed 30 previously correct answers, and 14 returned the injected answer; hash checks missed six of nine attacks.
Stories per day · 30 days
2 stories, newest first · one card per story
Stories tagged #knowledge-poisoning
ToxicRAG: Compromising Retrieval-Augmented Generation Systems via Single-Shot Knowledge Poisoning Attacks
ToxicRAG shows a single narrative-form poisoned document can steer RAG answers, achieving 0.61-0.91 attack success rates across four LLMs.