MAFIA poisons RAG agent memory through probing and compact factual cloaks, reaching up to 90.7% attack success while evading low-FPR input audits.
Table 6: Retriever-paradigm generalization on MIMIC- III.(a)Macro RIR@ 4 across nine pairs.(b)ASR under the symmetricall-MiniLM-L6-v2retriever
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.AI 1years
2026 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
MAFIA: Query-Only Memory Attacks via Probing and Factual Injection against Audited LLM Agents
MAFIA poisons RAG agent memory through probing and compact factual cloaks, reaching up to 90.7% attack success while evading low-FPR input audits.