DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial

Abay Zhurekbay, Tao Liu, Fan Li

Retrieval-augmented generation (RAG) systems are vulnerable to corpus poisoning: an attacker who inserts a crafted document into the retrieval corpus can steer the underlying large…