COMA: A Compositional Misleading Attack Class on Security-RAG, and a Causal Counterfactual Defense

Chinmay Gondhalekar, Urjitkumar Patel

Every document a security copilot retrieves can be true, instruction-free, and non-contradictory --- and the copilot can still be driven to assess a critical, exploitable vulnerabi…