← Back to all categories

RAG Security

2 resources

Infrastructure & Deployment

Vector database security, retrieval poisoning, and embedding attacks

paper reviewed open access 2024

PoisonedRAG: Knowledge Poisoning Attacks to Retrieval-Augmented Generation of Large Language Models

Wei Zou, Runpeng Geng, Binghui Wang + 1 more — arXiv preprint

Demonstrates knowledge poisoning attacks against RAG systems where adversaries inject malicious texts into the knowledge database to manipulate LLM outputs.

paper reviewed open access 2024

ConfusedPilot: Confused Deputy Attacks Against RAG-based Code Assistants

Andrew Patel, Hossein Aboutorab, Ilia Kolochenko — arXiv preprint

Introduces confused deputy attacks against RAG-based code assistants like GitHub Copilot, where poisoned code repositories manipulate assistant outputs.