Wrapping erroneous knowledge in a reasoning model's own chain-of-thought template raises poisoning attack success on an R1-based RAG system by 10 percentage points over the strongest prior method in a 100-query MS MARCO test.
Title resolution pending
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.IR 1years
2025 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems
Wrapping erroneous knowledge in a reasoning model's own chain-of-thought template raises poisoning attack success on an R1-based RAG system by 10 percentage points over the strongest prior method in a 100-query MS MARCO test.