{"as_of":"2026-08-08T16:40:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:672ca62912b32ae71e0e24d3d7cc787a412699a88ae7aac4c52f72c2c1887a86","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":48,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":48,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":48,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":48,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T15:41:04.455697Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":4,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2409.10102","last_updated":"2026-05-16T07:15:07Z","snapshot_observed_at":"2026-08-04T19:12:49.508911Z","submitted_at":"2024-09-16T09:06:44Z","title":"Trustworthiness in Retrieval-Augmented Generation Systems: A Survey","version":2},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-05-23T21:08:11.787013Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2409.10102"},"observation_digest":"sha256:616d80859a3fbaaefb98a99d53692ef0b54382ba47e2d50d5eaaf483917977b6","observation_id":"91c34bd6-2743-4ffa-862f-9cf9a5233a5f","resolution":{"observed_at":"2026-05-23T21:08:25.872258Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2412.14113","last_updated":"2026-05-14T17:15:02Z","snapshot_observed_at":"2026-07-06T20:09:28.763595Z","submitted_at":"2024-12-18T17:58:58Z","title":"Adversarial Hubness in Multi-Modal Retrieval","version":4},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-05-23T06:39:36.039613Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2412.14113"},"observation_digest":"sha256:0af9f19e0126e3bb5330210259464820525a8f557825e426c92e3dcb8a9c5e23","observation_id":"ca842eed-6b4d-40c3-b8d7-7fa13c1a3e7f","resolution":{"observed_at":"2026-05-23T06:42:39.713826Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-07T15:41:04.455697Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models.arXiv preprint arXiv:2406.00083, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.14215","last_updated":"2026-07-08T13:57:53Z","snapshot_observed_at":"2026-08-08T10:01:26.451368Z","submitted_at":"2025-05-20T11:21:40Z","title":"Safety Degradation in AI Agents","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T15:41:04.455697Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2505.14215"},"observation_digest":"sha256:bdf3c2fa74b00ae19a510df6df4e7d0b04cf18ea62977ce31e7b69d057c61adb","observation_id":"4491e144-20db-40d9-9160-c339949e7d54","resolution":{"observed_at":"2026-08-07T15:41:04.455697Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-07T15:15:48.764754Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.15753","last_updated":"2025-05-21T16:58:14Z","snapshot_observed_at":"2026-08-07T15:09:59.174634Z","submitted_at":"2025-05-21T16:58:14Z","title":"Scalable Defense against In-the-wild Jailbreaking Attacks with Safety Context Retrieval","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T15:15:48.764754Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2505.15753"},"observation_digest":"sha256:32350501d80849d3b7e09791a9cb36376974f97fc2b61d247a5859219edf14b7","observation_id":"d7afac52-f6a5-4c8d-ab70-f10d27949b6a","resolution":{"observed_at":"2026-08-07T15:15:48.764754Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-07T15:14:49.451675Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16014","last_updated":"2026-06-02T10:15:17Z","snapshot_observed_at":"2026-08-07T15:06:12.174579Z","submitted_at":"2025-05-21T20:57:16Z","title":"Ranking Free RAG: Replacing Re-ranking with Selection in RAG for Sensitive Domains","version":5},"reference_index":53,"source":"arxiv_source","source_observed_at":"2026-08-07T15:14:49.451675Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2505.16014"},"observation_digest":"sha256:2527320deca4b4bbadadd78c4e8e3c09cb7754cf9333f3dab6849c1d29e585cc","observation_id":"54b84ce8-fc91-443f-846e-7b6b4fadf8e4","resolution":{"observed_at":"2026-08-07T15:14:49.451675Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-07T14:32:59.243279Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18543","last_updated":"2025-05-24T06:17:59Z","snapshot_observed_at":"2026-08-08T00:41:28.430373Z","submitted_at":"2025-05-24T06:17:59Z","title":"Benchmarking Poisoning Attacks against Retrieval-Augmented Generation","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-07T14:32:59.243279Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2505.18543"},"observation_digest":"sha256:a9cc264653e07117667b34c5e1029a6bcb516ecd9868db0d897c2d5cbf05e72a","observation_id":"328b8b7c-44b9-4a1d-b583-a54246d7c18b","resolution":{"observed_at":"2026-08-07T14:32:59.243279Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-07T14:36:35.283940Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-07T14:27:05.919339Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.283940Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:60398b069f3416280ea29ad5a0bcbf8d02be38c88e0bcb50458c8a3e0e3e12f0","observation_id":"4265ee53-a561-4244-b577-fe49af649332","resolution":{"observed_at":"2026-08-07T14:36:35.283940Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-07T13:21:40.107539Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-07T13:13:42.422712Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.107539Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:2fbe44ba836d5d5f134b99c7387d45afaa88f31fc6eb1df2d7b6a924a4e395c7","observation_id":"bc749ad0-d4f3-4c11-bf0d-2d2ea5713ce2","resolution":{"observed_at":"2026-08-07T13:21:40.107539Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-07T12:11:28.794640Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.00281","last_updated":"2025-05-30T22:22:05Z","snapshot_observed_at":"2026-08-07T12:06:22.635673Z","submitted_at":"2025-05-30T22:22:05Z","title":"Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T12:11:28.794640Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2506.00281"},"observation_digest":"sha256:578715c18534257b51febbbacd8dac21c6e176b403c046113ec0ff33e1dee3c7","observation_id":"ffc3afd1-f751-4182-93cf-2015b845a542","resolution":{"observed_at":"2026-08-07T12:11:28.794640Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2506.03535","last_updated":"2026-04-20T04:02:41Z","snapshot_observed_at":"2026-07-06T21:36:15.867826Z","submitted_at":"2025-06-04T03:31:00Z","title":"Across Programming Language Silos: A Study on Cross-Lingual Retrieval-augmented Code Generation","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-05-19T11:52:44.990234Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2506.03535"},"observation_digest":"sha256:46d9e05c0795f2ac2860fc9de71587a85036d85ea71427872ecca6905f769014","observation_id":"30727c9b-87cd-4495-9751-505a1b88a8f0","resolution":{"observed_at":"2026-05-19T11:53:03.501566Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-07T04:15:38.811538Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.11415","last_updated":"2025-06-13T02:28:46Z","snapshot_observed_at":"2026-08-07T23:47:33.467619Z","submitted_at":"2025-06-13T02:28:46Z","title":"Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMs","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T04:15:38.811538Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2506.11415"},"observation_digest":"sha256:1ca794aa521d53c9f687295e6f3d5a4bd282d72f20cfd9835fa6d94d3dd67e88","observation_id":"658ee460-5d59-4cf6-96ba-1e980303fe72","resolution":{"observed_at":"2026-08-07T04:15:38.811538Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-06T19:37:31.612720Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.05093","last_updated":"2025-07-07T15:13:54Z","snapshot_observed_at":"2026-08-08T07:09:09.000323Z","submitted_at":"2025-07-07T15:13:54Z","title":"The Hidden Threat in Plain Text: Attacking RAG Data Loaders","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T19:37:31.612720Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2507.05093"},"observation_digest":"sha256:471fa0df5f625341915ee9c2c1fad09eb798462122ae9fd795a77256653d7ce3","observation_id":"ea89fa41-4b5d-4873-956e-81c0cf00e772","resolution":{"observed_at":"2026-08-06T19:37:31.612720Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-06T19:01:14.676455Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.08862","last_updated":"2025-07-09T13:06:58Z","snapshot_observed_at":"2026-08-06T18:51:23.874283Z","submitted_at":"2025-07-09T13:06:58Z","title":"RAG Safety: Exploring Knowledge Poisoning Attacks to Retrieval-Augmented Generation","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T19:01:14.676455Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2507.08862"},"observation_digest":"sha256:636095cf6af5987166571034faa9d69a13c1f87a1ad8e723c51c7ffd98d9ebeb","observation_id":"bd98b675-2cd0-452f-9148-10e4c1c99f82","resolution":{"observed_at":"2026-08-06T19:01:14.676455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-06T15:48:57.340757Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15042","last_updated":"2025-07-20T16:48:20Z","snapshot_observed_at":"2026-08-06T15:39:43.732685Z","submitted_at":"2025-07-20T16:48:20Z","title":"DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T15:48:57.340757Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2507.15042"},"observation_digest":"sha256:e2f148a6db7ae2b59d7f7f743ae2c50aaf8e302a8dc0a7a7d174a3afddc5eca0","observation_id":"ea27f41a-2e62-4e1a-8a1a-c919c5fc8c86","resolution":{"observed_at":"2026-08-06T15:48:57.340757Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-06T14:42:08.191718Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.18202","last_updated":"2025-07-24T08:58:41Z","snapshot_observed_at":"2026-08-08T08:00:57.460209Z","submitted_at":"2025-07-24T08:58:41Z","title":"Safeguarding RAG Pipelines with GMTP: A Gradient-based Masked Token Probability Method for Poisoned Document Detection","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-08-06T14:42:08.191718Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2507.18202"},"observation_digest":"sha256:d3085db4dd885204db44910190dfec7f61e136c54b54c0670e42067d66c41252","observation_id":"da8ed986-5354-434a-80d0-a496ca3b8b19","resolution":{"observed_at":"2026-08-06T14:42:08.191718Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T20:31:48.207577Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-08T02:31:17.622343Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":166,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:48.207577Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:a8dac8a5bb72968c5f3eab8a525141172f74ae78040dc3fb37fd062b11128bb1","observation_id":"08462dd7-d85c-4a84-a538-ed61b761a77a","resolution":{"observed_at":"2026-08-05T20:31:48.207577Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T15:09:22.340790Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.20408","last_updated":"2025-08-28T04:13:51Z","snapshot_observed_at":"2026-08-05T15:09:21.814283Z","submitted_at":"2025-08-28T04:13:51Z","title":"Fact or Facsimile? Evaluating the Factual Robustness of Modern Retrievers","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T15:09:22.340790Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2508.20408"},"observation_digest":"sha256:be4a642981e20298a2fa1d6868b09018e7f3adc06237b1add3d60a7ae7c5dd8a","observation_id":"6dc4a9c9-443a-4cc7-a372-be7f1c2d2c19","resolution":{"observed_at":"2026-08-05T15:09:22.340790Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T10:44:10.621289Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.03787","last_updated":"2025-09-04T00:45:58Z","snapshot_observed_at":"2026-08-08T11:14:03.361977Z","submitted_at":"2025-09-04T00:45:58Z","title":"Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-05T10:44:10.621289Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2509.03787"},"observation_digest":"sha256:dd93c0695e90947dac9d927ff0e59b550f32bebc2f934be286cda65dea3f45a1","observation_id":"0698889b-9b55-4363-ba93-fe97c98b0fb0","resolution":{"observed_at":"2026-08-05T10:44:10.621289Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-04T21:33:59.967456Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07941","last_updated":"2025-09-09T17:21:20Z","snapshot_observed_at":"2026-08-06T22:34:55.594338Z","submitted_at":"2025-09-09T17:21:20Z","title":"ImportSnare: Directed \"Code Manual\" Hijacking in Retrieval-Augmented Code Generation","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-04T21:33:59.967456Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2509.07941"},"observation_digest":"sha256:3e484020810acb2ea9733cebd5dfc6dda8d5e0dbe61e60558ede53cfa35aceb8","observation_id":"b26f408d-5189-41ab-a288-c7e12d97b416","resolution":{"observed_at":"2026-08-04T21:33:59.967456Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-04T15:17:39.491503Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.20324","last_updated":"2026-06-04T17:26:56Z","snapshot_observed_at":"2026-08-07T20:32:31.507281Z","submitted_at":"2025-09-24T17:11:35Z","title":"RAG Security and Privacy: Formalizing the Threat Model and Attack Surface","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:39.491503Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2509.20324"},"observation_digest":"sha256:74c0b2c3e56a6b24d7c5e5faf6a2f95674eca59668bb5a2139d3ada0614f8565","observation_id":"3a168799-fe6d-494c-bb28-33b08b53e1ab","resolution":{"observed_at":"2026-08-04T15:17:39.491503Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-03T19:27:04.056271Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-07T23:47:52.298069Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.056271Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:1ba596a970c8da3367a0166d7f0c6bf23d3449cc821723616fc1abf0ba119bb7","observation_id":"d356bdc1-be44-41b7-b443-d3ac88d87d01","resolution":{"observed_at":"2026-08-03T19:27:04.056271Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-03T10:45:19.715096Z","title":"arXiv preprint arXiv:2406.00083 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2601.10758","last_updated":"2026-07-07T04:20:13Z","snapshot_observed_at":"2026-08-06T11:00:52.802245Z","submitted_at":"2026-01-14T03:29:13Z","title":"Agents at Risk: How Users Unwittingly Undermine LLM Safety","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-03T10:45:19.715096Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2601.10758"},"observation_digest":"sha256:f863c7292d6fa6de86839923533136261189b19bba7fbc4d99e118aaf15bc120","observation_id":"bc236d1a-094c-4300-ab84-70e0ffb8542c","resolution":{"observed_at":"2026-08-03T10:45:19.715096Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.01758","last_updated":"2026-05-14T12:12:16Z","snapshot_observed_at":"2026-07-06T23:14:57.459903Z","submitted_at":"2026-05-03T07:38:42Z","title":"Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-10T15:39:32.595169Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.01758"},"observation_digest":"sha256:781821bbf3ed983c096b14981883c66d7805092f9f511f03b25b87b1ca7b86c3","observation_id":"97e2bfd2-6c13-4d05-aa86-599386e4e2a0","resolution":{"observed_at":"2026-05-11T10:06:02.826341Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.01758","last_updated":"2026-05-14T12:12:16Z","snapshot_observed_at":"2026-07-06T23:14:57.459903Z","submitted_at":"2026-05-03T07:38:42Z","title":"Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-11T01:46:54.430546Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.01758"},"observation_digest":"sha256:9da573912e7a783a5469deed524f3675342d8b4ecd15a0155811d8baf69ca381","observation_id":"b44c9ca2-2724-483c-9763-091d363ca56e","resolution":{"observed_at":"2026-05-11T04:20:58.075095Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.01758","last_updated":"2026-05-14T12:12:16Z","snapshot_observed_at":"2026-07-06T23:14:57.459903Z","submitted_at":"2026-05-03T07:38:42Z","title":"Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems","version":3},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-15T07:11:16.568353Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.01758"},"observation_digest":"sha256:bdc589eb56d65f88c76edc1bec03a270561c4fe740773aaeb69663bb7d8f2406","observation_id":"55b8bb75-59f6-48f7-86ec-6c4871aa7226","resolution":{"observed_at":"2026-05-15T07:15:11.971658Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.01782","last_updated":"2026-05-03T08:42:29Z","snapshot_observed_at":"2026-07-31T09:19:52.528360Z","submitted_at":"2026-05-03T08:42:29Z","title":"Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-05-10T14:52:32.202125Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.01782"},"observation_digest":"sha256:f5529672f21b11d43e6cdc49cbd398b94c68ff6d3c72d8b775ba2c9ad150cdf0","observation_id":"5c3a5328-e2de-447d-9e58-e1cc91352e7c","resolution":{"observed_at":"2026-05-11T11:31:00.719023Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.03482","last_updated":"2026-05-07T11:41:14Z","snapshot_observed_at":"2026-07-30T12:28:00.209964Z","submitted_at":"2026-05-05T08:15:41Z","title":"MEMSAD: Gradient-Coupled Anomaly Detection for Memory Poisoning in Retrieval-Augmented Agents","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-07T15:57:39.809778Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.03482"},"observation_digest":"sha256:365ba92ed4f6fb628c225fbfdb8751c8e71d709889224a5dcb13ef020b0759b5","observation_id":"8e5ad112-4320-450b-87a6-d2e016e660f8","resolution":{"observed_at":"2026-05-12T00:01:14.200165Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.03482","last_updated":"2026-05-07T11:41:14Z","snapshot_observed_at":"2026-07-30T12:28:00.209964Z","submitted_at":"2026-05-05T08:15:41Z","title":"MEMSAD: Gradient-Coupled Anomaly Detection for Memory Poisoning in Retrieval-Augmented Agents","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-08T18:50:41.401393Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.03482"},"observation_digest":"sha256:369fea394af6c3c0b2cb36f11070e9029ba63574cfe5f1778fa7532efb8de3a1","observation_id":"6eb55303-672c-4096-b1e2-6793bb57973b","resolution":{"observed_at":"2026-05-09T06:10:41.480515Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.09033","last_updated":"2026-05-15T08:27:09Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-05-09T16:16:41Z","title":"ShadowMerge: A Novel Poisoning Attack on Graph-Based Agent Memory via Relation-Channel Conflicts","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-12T02:27:03.154390Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.09033"},"observation_digest":"sha256:3a30da2086b319faf864630e20fffb5cf374d0bc7e4a716dce00a72f41e22f0a","observation_id":"9b532e46-4267-4f61-b014-7bcec7b64b37","resolution":{"observed_at":"2026-05-12T07:37:06.910242Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.09033","last_updated":"2026-05-15T08:27:09Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-05-09T16:16:41Z","title":"ShadowMerge: A Novel Poisoning Attack on Graph-Based Agent Memory via Relation-Channel Conflicts","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-15T06:09:36.338641Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.09033"},"observation_digest":"sha256:682b84d85bb276dfbf5d5b46e03dd93a1604d5448a0e8345b503571682e4f6c6","observation_id":"6b7266d8-8364-4ec0-96f7-3f3284ce1d61","resolution":{"observed_at":"2026-05-15T06:09:49.285246Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.09033","last_updated":"2026-05-15T08:27:09Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-05-09T16:16:41Z","title":"ShadowMerge: A Novel Poisoning Attack on Graph-Based Agent Memory via Relation-Channel Conflicts","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-19T17:38:45.919637Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.09033"},"observation_digest":"sha256:9672c4422cd5adbfa27e9cf2117b4607ba149b8d0870d713c9a872e9601f609c","observation_id":"47df3c3a-d0fa-402d-bb84-dec322ccf0a5","resolution":{"observed_at":"2026-05-19T17:42:42.322138Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.09822","last_updated":"2026-05-10T23:55:13Z","snapshot_observed_at":"2026-08-05T13:34:08.474381Z","submitted_at":"2026-05-10T23:55:13Z","title":"Oracle Poisoning: Corrupting Knowledge Graphs to Weaponise AI Agent Reasoning","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-12T02:27:06.805794Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.09822"},"observation_digest":"sha256:fdbc79fca918583b887bfdc2696f1b13458ecbc450be90c778b1ec2a48502340","observation_id":"4a43d873-cb4e-48c2-aed4-b37a706d047f","resolution":{"observed_at":"2026-05-12T07:37:04.167030Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.11996","last_updated":"2026-05-12T11:46:25Z","snapshot_observed_at":"2026-07-06T23:23:44.276236Z","submitted_at":"2026-05-12T11:46:25Z","title":"BadSKP: Backdoor Attacks on Knowledge Graph-Enhanced LLMs with Soft Prompts","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-13T05:10:11.345256Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.11996"},"observation_digest":"sha256:fc04138fee15471969a1d8059bbee210002c239a38aeb7e86ada6c5e4ed4d8b5","observation_id":"bef98505-0f5b-411d-a8bf-a460bd48ddf7","resolution":{"observed_at":"2026-05-13T05:12:17.840776Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.22041","last_updated":"2026-05-21T06:25:46Z","snapshot_observed_at":"2026-08-02T21:43:59.005437Z","submitted_at":"2026-05-21T06:25:46Z","title":"RADAR: Defending RAG Dynamically against Retrieval Corruption","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-22T05:58:03.701617Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.22041"},"observation_digest":"sha256:c8025d777892760b5ebd9c30ca36782433c0356dbad9aa9ece04452473ef52f4","observation_id":"70b3c23b-d66a-4024-b56b-75b3aea22579","resolution":{"observed_at":"2026-05-22T06:01:08.946270Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2605.28074","last_updated":"2026-05-27T07:30:30Z","snapshot_observed_at":"2026-08-02T21:44:55.814873Z","submitted_at":"2026-05-27T07:30:30Z","title":"SilentRetrieval: Hijacking Retrieval-Augmented Generation via Semantically-Preserving Adversarial Data Poisoning","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-06-29T11:49:32.880569Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2605.28074"},"observation_digest":"sha256:60941a7ce1ab884ffe8c2bcf7ff35abcc480fa49735eaf8148e784151eed04c5","observation_id":"eb22206c-65a4-4f8b-9a37-b080c9baabbe","resolution":{"observed_at":"2026-06-29T11:53:23.276673Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2606.01212","last_updated":"2026-06-03T04:47:29Z","snapshot_observed_at":"2026-07-06T23:41:48.357871Z","submitted_at":"2026-05-31T13:03:47Z","title":"DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-06-28T17:43:41.256808Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2606.01212"},"observation_digest":"sha256:024baccbacd456fc67ec6a6ebcf4d3d7e5fd0129328e82cdcccaddc2c8e225f5","observation_id":"3f50070c-d0bb-4aab-a2ab-00f6a455b65e","resolution":{"observed_at":"2026-07-01T20:46:13.965582Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2606.03354","last_updated":"2026-06-02T09:03:56Z","snapshot_observed_at":"2026-08-04T03:13:16.157376Z","submitted_at":"2026-06-02T09:03:56Z","title":"ImageAuditor: Membership Inference Attack against Image-based Retrieval-Augmented Generation","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-06-28T10:02:27.652157Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2606.03354"},"observation_digest":"sha256:da28f13e33f98c3bf3631384e905f1ec22b9c026f57e270f882f90712020b134","observation_id":"98b64758-2bfc-4225-b2ea-c19ab634e4bb","resolution":{"observed_at":"2026-07-02T03:26:29.518497Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2606.07783","last_updated":"2026-06-05T18:54:23Z","snapshot_observed_at":"2026-08-06T05:51:41.068779Z","submitted_at":"2026-06-05T18:54:23Z","title":"Evaluating RAG Reliability under Clean, Misleading, and Mixed Retrieval","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-27T21:49:50.544602Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2606.07783"},"observation_digest":"sha256:ae0edc9c8f3b75800209c1cb0c2f174af73cf867eb6d99c95b3ea0590b201e8d","observation_id":"2857d78b-0fdd-48b9-b79f-9b36cab6b428","resolution":{"observed_at":"2026-07-02T18:57:16.554219Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2606.17443","last_updated":"2026-06-16T02:54:34Z","snapshot_observed_at":"2026-07-06T23:53:02.028020Z","submitted_at":"2026-06-16T02:54:34Z","title":"Incumbent Advantage: Brand Bias and Cognitive Manipulation Dynamics in LLM Recommendation Systems","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-06-27T01:40:08.788224Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2606.17443"},"observation_digest":"sha256:4c6e113a065a6e5d474a05735edbb74b3989e5e8bfe27c28a51da865842447d7","observation_id":"22ed9aac-637c-4036-986c-aba0c7161e10","resolution":{"observed_at":"2026-07-03T20:08:55.781044Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2606.18310","last_updated":"2026-06-16T09:17:56Z","snapshot_observed_at":"2026-08-07T18:50:01.682045Z","submitted_at":"2026-06-16T09:17:56Z","title":"Conflict-Aware Retriever Editing for Knowledge Injection Attacks on LLM-Based RAG Systems","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-27T00:29:09.121399Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2606.18310"},"observation_digest":"sha256:9967bd648842db35b4f1a3a2db223486d8a505a631bf989fa17aa011c836f6a6","observation_id":"e566a183-4f0b-456a-9d6a-d0607974a524","resolution":{"observed_at":"2026-07-03T21:28:59.101853Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2606.23892","last_updated":"2026-06-22T19:41:57Z","snapshot_observed_at":"2026-08-06T14:11:51.998297Z","submitted_at":"2026-06-22T19:41:57Z","title":"REALM: A Unified Red-Teaming Benchmark for Physical-World VLMs","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-06-26T08:44:45.853401Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2606.23892"},"observation_digest":"sha256:f4b33ad885642aa4a58ad48f83a01b4eeda8d96a0897c8f7d66aeed5c257ab92","observation_id":"aa3bdd1d-adb2-447d-851a-caad10033dd2","resolution":{"observed_at":"2026-07-04T10:29:45.744501Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2606.25533","last_updated":"2026-06-24T08:08:10Z","snapshot_observed_at":"2026-08-06T23:51:47.345747Z","submitted_at":"2026-06-24T08:08:10Z","title":"Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-06-25T20:56:20.603088Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2606.25533"},"observation_digest":"sha256:da812270135de54722b4a6e464b7ad4bef37f07133cbe72e5e51e42f19a9a869","observation_id":"213c305a-3481-42fa-b2a1-101e37b2b6b3","resolution":{"observed_at":"2026-07-04T20:00:07.859278Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":"2406.00083","doi":"10.48550/arxiv.2406.00083","metadata_source":"arxiv_reference","pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Badrag: Identifying vulnerabilities in retrieval aug- mented generation of large language models","venue":"arXiv (Cornell University)","work_id":"c74b274d-9712-4e7c-b3c5-44b93b7a6b57","year":2024},"citing_paper":{"arxiv_id":"2607.00012","last_updated":"2026-05-08T10:35:13Z","snapshot_observed_at":"2026-08-04T21:03:13.172809Z","submitted_at":"2026-05-08T10:35:13Z","title":"PRA-RAG: Provably Robust Aggregation in Retrieval-Augmented Generation against Retrieval Corruption","version":1},"reference_index":128,"source":"arxiv_source","source_observed_at":"2026-07-02T23:42:23.695930Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2607.00012"},"observation_digest":"sha256:2d1c78ec212e9dfb336ba27780ab34b9203bf63bea9657db65031cb861734d22","observation_id":"6e1ab760-3a35-4b45-ba72-c0e6102bcea5","resolution":{"observed_at":"2026-07-02T23:47:27.213076Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-07-12T00:17:10.365724Z","title":"BadRAG: Identify- ing vulnerabilities in retrieval augmented generation of large language models.arXiv preprint arXiv:2406.00083,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.03739","last_updated":"2026-07-04T06:56:06Z","snapshot_observed_at":"2026-08-02T11:16:44.267497Z","submitted_at":"2026-07-04T06:56:06Z","title":"A Failure-Mode Benchmark for Polymorphic Sybil Poisoning in RAG","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-12T00:17:10.365724Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2607.03739"},"observation_digest":"sha256:7af3b942a2046143493634feaffde2adce4dba4bbb7996e727c69eb41087e3cd","observation_id":"232c078d-9864-487a-84a5-2c5a3c7add66","resolution":{"observed_at":"2026-07-12T00:17:10.365724Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-07-14T12:01:22.824663Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.10402","last_updated":"2026-07-11T17:04:17Z","snapshot_observed_at":"2026-08-07T05:33:22.175633Z","submitted_at":"2026-07-11T17:04:17Z","title":"Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability","version":1},"reference_index":215,"source":"pdf_text","source_observed_at":"2026-07-14T12:01:22.824663Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2607.10402"},"observation_digest":"sha256:875f0b599fca2cf60de2d09a0bfe34a3342bba9d864260d4b76c48f6596f7d20","observation_id":"d669d442-fdad-44ba-a64d-6e84070b1c76","resolution":{"observed_at":"2026-07-14T12:01:22.824663Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-01T17:47:13.420601Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17535","last_updated":"2026-07-20T04:27:50Z","snapshot_observed_at":"2026-08-08T02:11:09.053606Z","submitted_at":"2026-07-20T04:27:50Z","title":"Salience Induction against Multi-Hop RAG Agents: Threat and Defense","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-01T17:47:13.420601Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2607.17535"},"observation_digest":"sha256:018c70a8bce68e110faece01135120ceb9626a9bb67d498b846237c0cd84f168","observation_id":"9086b9e9-e56c-4c1d-87fd-60e0ec848a83","resolution":{"observed_at":"2026-08-01T17:47:13.420601Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-06T00:08:56.979447Z","title":"Badrag: Identifying vulnerabilities in retrieval augmented generation of large language models. arxiv 2024,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.02678","last_updated":"2026-08-02T20:33:05Z","snapshot_observed_at":"2026-08-07T23:09:52.762152Z","submitted_at":"2026-08-02T20:33:05Z","title":"DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T00:08:56.979447Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2608.02678"},"observation_digest":"sha256:1a4f8a929cd7b7fba8ce08e9243c9ed31b6c916cd7bbf755ca3723b6dfd98ecd","observation_id":"773c8ce7-9fb7-439e-bfb2-53574988c585","resolution":{"observed_at":"2026-08-06T00:08:56.979447Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2406.00083","snapshot_observed_at":"2026-08-06T17:25:42.532072Z","title":"arXiv preprint arXiv:2406.00083 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04756","last_updated":"2026-08-05T12:23:24Z","snapshot_observed_at":"2026-08-08T16:12:13.614560Z","submitted_at":"2026-08-05T12:23:24Z","title":"PURPOSE: Poisoning Conflict Resolution in RAG via Proxy-Fact-Grounded Updates","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-06T17:25:42.532072Z"},"links":{"cited_paper":"/paper/2406.00083","citing_paper":"/paper/2608.04756"},"observation_digest":"sha256:66c2b744c782d6bccdbd8888b4f7959c638a9f65fd32f9e34d8fae987cb1c384","observation_id":"630011d5-95b3-47a7-90bd-cc0e7b280b2d","resolution":{"observed_at":"2026-08-06T17:25:42.532072Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2406.00083/citation-record","integrity":"/paper/2406.00083/integrity","json":"/paper/2406.00083/citation-record.json","paper":"/paper/2406.00083"},"outbound":[],"paper":{"arxiv_id":"2406.00083","last_updated":"2024-06-06T13:38:42Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T22:05:18.163179Z","submitted_at":"2024-06-03T02:25:33Z","title":"BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 48 inbound Pith citation observations for arXiv:2406.00083."}