Ranked by Position: Order Sensitivity as an Exploitable Attack Surface in LLM Listwise Recommenders

Ge Zhang, Jingru Cheng, Huiyuan Chen

Large language models (LLMs) used as listwise rerankers in recommendation systems suffer from position bias when serializing candidate sets into prompts. We show this order sensiti…