Paper Citation Record · LEDGER

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation

As of 8 August 2026, this Paper Citation Record lists 99 of 99 outbound references and 9 inbound Pith citation observations for arXiv:2505.18543.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2505.18543 v1

Coverage vector

measured 99 of 99 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-07T14:33:01.360877Z

measured 108 of 108 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-07T06:34:17.273281+00:00

measured 9 of 9 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-05T15:18:36.938530Z

measured 1 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Reference resolution

99 of 99 outbound references displayed

verified exact2
verified fuzzy12
unresolved85
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

0
arxiv_reference, observed 2026-08-05T02:28:24.338817Z

Outbound references

Observation eb515526-36eb-4ddb-ac1d-6403d158fcc6 · outbound

This paper cites https://www.anthropic.com/news/claude-3-7-sonnet.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation https://www.anthropic.com/news/claude-3-7-sonnet

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:54.584518Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ae8db373-cc3f-40cb-a7de-59a73978ca30 · outbound

This paper cites https://blog.google/ technology/google-deepmind/google-gemini-ai-update-december-2024.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation https://blog.google/ technology/google-deepmind/google-gemini-ai-update-december-2024

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:54.611951Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0857b61f-942c-4c97-bef6-67570aa588ab · outbound

This paper cites https://openai.com/index/gpt-4-1.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation https://openai.com/index/gpt-4-1

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:54.633958Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 643ff895-629f-499f-ac38-a81905bcf1a5 · outbound

This paper cites https://modelcontextprotocol.io/ introduction.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation https://modelcontextprotocol.io/ introduction

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:54.681873Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 58c03155-f4a8-40ac-9815-68c44326f6db · outbound

This paper cites https://www.llama.com/models/llama-4.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation https://www.llama.com/models/llama-4

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:54.740720Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6e4f394b-0e7b-49e4-93df-4e9fc216083a · outbound

This paper cites an unresolved cited work.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Unresolved cited work

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:54.758341Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7023bea6-c370-4cc5-a31c-916988a544f6 · outbound

This paper cites GPT-4 Technical Report.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation GPT-4 Technical Report

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:54.807646Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 64299fff-671c-49d4-aaf4-19f231b63137 · outbound

This paper cites Trec ikat 2023: A test collection for evaluating conversational and interactive knowledge assistants.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Trec ikat 2023: A test collection for evaluating conversational and interactive knowledge assistants

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:54.846051Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation aba5cffd-0f26-43ef-92b9-ea45c14f564c · outbound

This paper cites PaLM 2 Technical Report.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation PaLM 2 Technical Report

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:54.871001Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c43278b2-fc8d-4757-b363-d31da86312d4 · outbound

This paper cites Improving language models by retrieving from trillions of tokens.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Improving language models by retrieving from trillions of tokens

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:54.920453Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 23918784-0ac5-4ee5-b537-342b8cfdf8ea · outbound

This paper cites Language models are few-shot learners.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Language models are few-shot learners

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:55.070616Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 38dc0dc6-1b9b-4457-8321-342623c23181 · outbound

This paper cites Poisoning web-scale training datasets is practical.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Poisoning web-scale training datasets is practical

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:55.208722Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fa32781c-72a6-42de-83ed-2a3ed211942f · outbound

This paper cites RQ-RAG: Learning to Refine Queries for Retrieval Augmented Generation.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation RQ-RAG: Learning to Refine Queries for Retrieval Augmented Generation

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:55.354259Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 64cfae5a-c39a-413e-966f-63f4d9274ef6 · outbound

This paper cites One Shot Dominance: Knowledge Poisoning Attack on Retrieval-Augmented Generation Systems.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation One Shot Dominance: Knowledge Poisoning Attack on Retrieval-Augmented Generation Systems

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:55.442214Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4c67b0c5-ddc2-4d7f-acf8-be75083c4300 · outbound

This paper cites Phantom: General trigger attacks on retrieval augmented language generation.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Phantom: General trigger attacks on retrieval augmented language generation

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:55.545101Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 50c12053-cd4b-4c95-ba21-572ceb7fb9e2 · outbound

This paper cites Benchmarking large language mod- els in retrieval-augmented generation.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Benchmarking large language mod- els in retrieval-augmented generation

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:55.637930Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cc5f52d0-1f83-43f5-b11b-3be84cc33e1f · outbound

This paper cites MuRAG: Multimodal Retrieval-Augmented Generator for Open Question Answering over Images and Text.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation MuRAG: Multimodal Retrieval-Augmented Generator for Open Question Answering over Images and Text

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:55.658464Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c1780cfb-b22e-4278-807b-4b7dcdd9248a · outbound

This paper cites Can Pre-trained Vision and Language Models Answer Visual Information-Seeking Questions?.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Can Pre-trained Vision and Language Models Answer Visual Information-Seeking Questions?

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:55.697518Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cd8320f5-4d1a-443a-9a54-047f25fc888a · outbound

This paper cites Agentpoison: Red-teaming llm agents via poisoning memory or knowledge bases.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Agentpoison: Red-teaming llm agents via poisoning memory or knowledge bases

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:55.773914Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d4bf530a-d7be-4bf1-8238-a5dbb768c4b2 · outbound

This paper cites Flipedrag: Black-box opinion manipulation attacks to retrieval- augmented generation of large language models.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Flipedrag: Black-box opinion manipulation attacks to retrieval- augmented generation of large language models

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:55.887118Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c6a40ba3-7413-49b3-ba06-8121ceb5ab82 · outbound

This paper cites TrojanRAG: Retrieval-Augmented Generation Can Be Backdoor Driver in Large Language Models.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation TrojanRAG: Retrieval-Augmented Generation Can Be Backdoor Driver in Large Language Models

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:55.989945Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c2dcd335-ad68-4fca-a280-e63feeea52f7 · outbound

This paper cites CORAL: Benchmarking Multi-turn Conversational Retrieval-Augmentation Generation.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation CORAL: Benchmarking Multi-turn Conversational Retrieval-Augmentation Generation

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:56.150927Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5e4051a2-0940-449c-bbcc-940cfc2150f4 · outbound

This paper cites Typos that Broke the RAG's Back: Genetic Attack on RAG Pipeline by Simulating Documents in the Wild via Low-level Perturbations.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Typos that Broke the RAG's Back: Genetic Attack on RAG Pipeline by Simulating Documents in the Wild via Low-level Perturbations

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:56.319699Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation af08a444-e465-442d-913d-d06fea622b93 · outbound

This paper cites The rag paradox: A black-box attack exploiting unintentional vulnerabilities in retrieval-augmented generation systems.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation The rag paradox: A black-box attack exploiting unintentional vulnerabilities in retrieval-augmented generation systems

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:56.452133Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0cd633ec-05aa-4362-ab10-094ec0fb47af · outbound

This paper cites BoolQ: Exploring the Surprising Difficulty of Natural Yes/No Questions.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation BoolQ: Exploring the Surprising Difficulty of Natural Yes/No Questions

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:56.493361Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2e4aeb03-d6d5-4a7a-92dc-0872acf117ef · outbound

This paper cites The power of noise: Redefining retrieval for rag systems.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation The power of noise: Redefining retrieval for rag systems

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:56.531007Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9d2fd507-02b2-4ea7-b9a0-48579515f91d · outbound

This paper cites Retrieval-Augmented Generation for Large Language Models: A Survey.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Retrieval-Augmented Generation for Large Language Models: A Survey

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:56.573813Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3a2643ec-c27c-4d98-971e-af52f1cc1db8 · outbound

This paper cites Did aristotle use a laptop? a question answering benchmark with implicit reasoning strategies.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Did aristotle use a laptop? a question answering benchmark with implicit reasoning strategies

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:56.680823Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e8743175-d732-43ce-b914-a907cefe0218 · outbound

This paper cites Topic-fliprag: Topic-orientated adversarial opinion manipulation attacks to retrieval-augmented generation models.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Topic-fliprag: Topic-orientated adversarial opinion manipulation attacks to retrieval-augmented generation models

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:56.692225Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c0b00558-31dd-4191-a7ce-c8bbc7b5da10 · outbound

This paper cites DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:56.696425Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation da75b75a-9208-4cc9-a5a5-c2e6981ba25d · outbound

This paper cites GPT-4o System Card.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation GPT-4o System Card

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:56.786445Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fbd9e164-e37c-4b57-956f-3305db231dda · outbound

This paper cites Unsupervised Dense Information Retrieval with Contrastive Learning.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Unsupervised Dense Information Retrieval with Contrastive Learning

Reference 32

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:56.815949Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f16bfc5d-3549-4832-ab58-81d609ddc017 · outbound

This paper cites Baseline Defenses for Adversarial Attacks Against Aligned Language Models.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Baseline Defenses for Adversarial Attacks Against Aligned Language Models

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:56.855487Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b5043607-4dc8-4f12-bf13-abc547788d41 · outbound

This paper cites Interpolated estimation of markov source parameters from sparse data.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Interpolated estimation of markov source parameters from sparse data

Reference 34

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:56.885628Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 00b2ce9f-8a68-46c1-9a83-0d7152b1a3bf · outbound

This paper cites Adaptive-RAG: Learning to Adapt Retrieval-Augmented Large Language Models through Question Complexity.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Adaptive-RAG: Learning to Adapt Retrieval-Augmented Large Language Models through Question Complexity

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:56.955402Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 11ef88db-0564-4add-aea8-30e540ca2488 · outbound

This paper cites Feedback-Guided Extraction of Knowledge Base from Retrieval-Augmented LLM Applications.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Feedback-Guided Extraction of Knowledge Base from Retrieval-Augmented LLM Applications

Reference 36

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:57.001435Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ce9e1479-6608-4898-b3ed-06f61f811288 · outbound

This paper cites Active Retrieval Augmented Generation.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Active Retrieval Augmented Generation

Reference 37

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:57.036232Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 78610109-bc3a-4a30-a63e-a61d16299297 · outbound

This paper cites PR-Attack: Coordinated Prompt-RAG Attacks on Retrieval-Augmented Generation in Large Language Models via Bilevel Optimization.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation PR-Attack: Coordinated Prompt-RAG Attacks on Retrieval-Augmented Generation in Large Language Models via Bilevel Optimization

Reference 38

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:57.110743Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e3930e9d-7551-46ad-b14b-e66ab494071f · outbound

This paper cites FlashRAG: A Modular Toolkit for Efficient Retrieval-Augmented Generation Research.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation FlashRAG: A Modular Toolkit for Efficient Retrieval-Augmented Generation Research

Reference 39

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:57.144351Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 759c364f-7a02-4b20-9ba5-983c77c6b480 · outbound

This paper cites Dense Passage Retrieval for Open-Domain Question Answering.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Dense Passage Retrieval for Open-Domain Question Answering

Reference 40

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:57.180310Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b814be3e-e3fc-48e9-8bed-c17ed713b0eb · outbound

This paper cites MTRAG: A Multi-Turn Conversational Benchmark for Evaluating Retrieval-Augmented Generation Systems.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation MTRAG: A Multi-Turn Conversational Benchmark for Evaluating Retrieval-Augmented Generation Systems

Reference 41

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:57.233051Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 752c2593-87c5-4ba8-a28c-f27132dbc365 · outbound

This paper cites SuRe: Summarizing Retrievals using Answer Candidates for Open-domain QA of LLMs.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation SuRe: Summarizing Retrievals using Answer Candidates for Open-domain QA of LLMs

Reference 42

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:57.295105Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3748f086-724c-41fd-a4f5-1bb7ec0b7c11 · outbound

This paper cites RAD-Bench: Evaluating Large Language Models Capabilities in Retrieval Augmented Dialogues.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation RAD-Bench: Evaluating Large Language Models Capabilities in Retrieval Augmented Dialogues

Reference 43

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:57.345015Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f386655e-c817-471e-9fe2-c9f55c3f2ae5 · outbound

This paper cites Natural questions: a benchmark for question answering research.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Natural questions: a benchmark for question answering research

Reference 44

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:57.398975Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0edb92d7-7eee-4ece-8bd8-34a34f868674 · outbound

This paper cites AlzheimerRAG: Multimodal Retrieval Augmented Generation for Clinical Use Cases using PubMed articles.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation AlzheimerRAG: Multimodal Retrieval Augmented Generation for Clinical Use Cases using PubMed articles

Reference 45

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:57.426171Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 894c6faf-ea8b-46d8-b131-31dafac7bfc8 · outbound

This paper cites Retrieval-augmented generation for knowledge-intensive nlp tasks.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Retrieval-augmented generation for knowledge-intensive nlp tasks

Reference 46

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:57.461562Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 729a7a0f-0f24-42ec-a575-6b483fbbb14c · outbound

This paper cites Seeing is believing: Black-box member- ship inference attacks against retrieval augmented generation.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Seeing is believing: Black-box member- ship inference attacks against retrieval augmented generation

Reference 47

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:57.498679Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 68520974-af71-4bd0-88a9-2bde47f4dfa4 · outbound

This paper cites SafeRAG: Benchmarking Security in Retrieval-Augmented Generation of Large Language Model.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation SafeRAG: Benchmarking Security in Retrieval-Augmented Generation of Large Language Model

Reference 48

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:57.580657Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d958df5b-73a0-4c35-8156-ce0fa693c920 · outbound

This paper cites DeepSeek-V3 Technical Report.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation DeepSeek-V3 Technical Report

Reference 49

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:57.638696Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a97f2a88-7634-424f-851f-340b3af38c68 · outbound

This paper cites Poisoned-MRAG: Knowledge Poisoning Attacks to Multimodal Retrieval Augmented Generation.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Poisoned-MRAG: Knowledge Poisoning Attacks to Multimodal Retrieval Augmented Generation

Reference 50

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:57.726747Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4a77545b-7d76-4a18-9cbe-493bd037948d · outbound

This paper cites Formalizing and benchmarking prompt injection attacks and defenses.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Formalizing and benchmarking prompt injection attacks and defenses

Reference 51

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:57.761534Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 33ab162c-ddc5-420f-8af4-294eeee17022 · outbound

This paper cites Backdoor attacks on dense passage retrievers for disseminating misinformation.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Backdoor attacks on dense passage retrievers for disseminating misinformation

Reference 52

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:33:05.173215Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 5e2d1d09-bd51-4d8c-b069-5f0ea0f5f0ef · outbound

This paper cites Making llms worth every penny: Resource-limited text classification in banking.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Making llms worth every penny: Resource-limited text classification in banking

Reference 53

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:33:04.999994Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 9f49b828-256e-4597-8975-7a03c49259bd · outbound

This paper cites A Language Agent for Autonomous Driving.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation A Language Agent for Autonomous Driving

Reference 54

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:57.939867Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a66ddbce-4b21-4dfe-bb4f-fcc24468d40a · outbound

This paper cites A Survey of Conversational Search.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation A Survey of Conversational Search

Reference 55

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:58.003425Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ef56b0a2-998e-459a-8780-63760ddd077d · outbound

This paper cites Riddle Me This! Stealthy Membership Inference for Retrieval-Augmented Generation.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Riddle Me This! Stealthy Membership Inference for Retrieval-Augmented Generation

Reference 56

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:58.039510Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 088a6e46-0538-449b-a100-58205d8fc4ba · outbound

This paper cites Ms marco: A human-generated machine reading comprehension dataset.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Ms marco: A human-generated machine reading comprehension dataset

Reference 57

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:58.065588Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6fe3f7de-d08f-40df-b732-c9742e05cb1b · outbound

This paper cites SQuAD: 100,000+ Questions for Machine Comprehension of Text.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation SQuAD: 100,000+ Questions for Machine Comprehension of Text

Reference 58

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:58.087928Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cb8b98b8-0102-46c7-8d13-1c1f8179ec3a · outbound

This paper cites ConfusedPilot: Confused Deputy Risks in RAG-based LLMs.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation ConfusedPilot: Confused Deputy Risks in RAG-based LLMs

Reference 59

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:58.142259Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 949958ee-935c-452c-af47-0e47b10c7c1a · outbound

This paper cites Ragchecker: A fine-grained framework for diagnosing retrieval-augmented generation.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Ragchecker: A fine-grained framework for diagnosing retrieval-augmented generation

Reference 60

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:33:04.834256Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 61cde023-59f1-48aa-91e2-9cd438cb00ab · outbound

This paper cites Evaluating retrieval quality in retrieval-augmented gen- eration.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Evaluating retrieval quality in retrieval-augmented gen- eration

Reference 61

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:33:04.673482Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 280d1d1c-91cd-405a-b6ca-2e22dfb36e5c · outbound

This paper cites Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker Documents.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Machine Against the RAG: Jamming Retrieval-Augmented Generation with Blocker Documents

Reference 62

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:58.335827Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 44637546-37a4-45af-9f19-36450d15649f · outbound

This paper cites EHRAgent: Code Empowers Large Language Models for Few-shot Complex Tabular Reasoning on Electronic Health Records.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation EHRAgent: Code Empowers Large Language Models for Few-shot Complex Tabular Reasoning on Electronic Health Records

Reference 63

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:58.376475Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1e7a13bf-88d0-4fc8-b588-1283af6c392b · outbound

This paper cites Trec 2019 news track overview.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Trec 2019 news track overview

Reference 64

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:33:04.479907Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 01b51a31-8c53-41c4-82da-36c89d5806a2 · outbound

This paper cites Corpus Poisoning via Approximate Greedy Gradient Descent.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Corpus Poisoning via Approximate Greedy Gradient Descent

Reference 65

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:58.465950Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cbad8f2e-2d8e-4b62-bb0a-ba33a3ec1543 · outbound

This paper cites Hoist with His Own Petard: Inducing Guardrails to Facilitate Denial-of-Service Attacks on Retrieval-Augmented Generation of LLMs.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Hoist with His Own Petard: Inducing Guardrails to Facilitate Denial-of-Service Attacks on Retrieval-Augmented Generation of LLMs

Reference 66

Resolution: verified exact; local_arxiv, observed 2026-08-07T14:33:02.217503Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 75222880-261e-4c65-8a19-c9aa0d4cc94e · outbound

This paper cites "Glue pizza and eat rocks" -- Exploiting Vulnerabilities in Retrieval-Augmented Generative Models.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation "Glue pizza and eat rocks" -- Exploiting Vulnerabilities in Retrieval-Augmented Generative Models

Reference 67

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:58.562417Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bcd31753-1910-4442-a9b9-d4de92e25569 · outbound

This paper cites Beir: A heterogeneous benchmark for zero-shot evaluation of information retrieval models.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Beir: A heterogeneous benchmark for zero-shot evaluation of information retrieval models

Reference 68

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:33:04.330229Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 917588d1-f70d-4afd-8621-b167c17b6a8e · outbound

This paper cites LaMDA: Language Models for Dialog Applications.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation LaMDA: Language Models for Dialog Applications

Reference 69

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:58.663864Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 49dde00f-fef8-4e05-8ceb-a73949af8933 · outbound

This paper cites Interleaving Retrieval with Chain-of-Thought Reasoning for Knowledge-Intensive Multi-Step Questions.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Interleaving Retrieval with Chain-of-Thought Reasoning for Knowledge-Intensive Multi-Step Questions

Reference 70

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:58.713934Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b094a397-d9c0-48d4-9396-90462ab27fff · outbound

This paper cites Astute RAG: Overcoming Imperfect Retrieval Augmentation and Knowledge Conflicts for Large Language Models.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Astute RAG: Overcoming Imperfect Retrieval Augmentation and Knowledge Conflicts for Large Language Models

Reference 71

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:58.813809Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bab4faa9-f060-4f28-8b19-f0627f7af40a · outbound

This paper cites Instructrag: Instructing retrieval-augmented genera- tion with explicit denoising.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Instructrag: Instructing retrieval-augmented genera- tion with explicit denoising

Reference 72

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:33:04.155188Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 69e9cec2-5a46-42f0-af9d-c514275dfb14 · outbound

This paper cites MMed-RAG: Versatile Multimodal RAG System for Medical Vision Language Models.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation MMed-RAG: Versatile Multimodal RAG System for Medical Vision Language Models

Reference 73

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:58.946846Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation aad991db-5542-4be9-84e5-a84ddb59b9d6 · outbound

This paper cites Rule: Reliable multimodal rag for factuality in medical vision language models.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Rule: Reliable multimodal rag for factuality in medical vision language models

Reference 74

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:33:03.986860Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 36f41795-19dd-4f66-a508-f3d77d94cd33 · outbound

This paper cites Certifiably robust rag against retrieval corruption.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Certifiably robust rag against retrieval corruption

Reference 75

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:59.042846Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 35dd4be1-c704-4bc1-ac10-5a8f157b14a0 · outbound

This paper cites Approximate Nearest Neighbor Negative Contrastive Learning for Dense Text Retrieval.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Approximate Nearest Neighbor Negative Contrastive Learning for Dense Text Retrieval

Reference 76

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:59.112188Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9dfdf5fe-7b53-4217-8534-df99030e04b0 · outbound

This paper cites RECOMP: Improving Retrieval-Augmented LMs with Compression and Selective Augmentation.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation RECOMP: Improving Retrieval-Augmented LMs with Compression and Selective Augmentation

Reference 77

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:59.202577Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 328b8b7c-44b9-4a1d-b583-a54246d7c18b · outbound

This paper cites BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 78

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:59.243279Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5fb72a77-095b-4c06-bc10-d5c4256a4135 · outbound

This paper cites Enhanced Multimodal RAG-LLM for Accurate Visual Question Answering.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Enhanced Multimodal RAG-LLM for Accurate Visual Question Answering

Reference 79

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:59.328846Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3c9dd4a4-71a5-4be1-9b76-4be3947826da · outbound

This paper cites Crag-comprehensive rag benchmark.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Crag-comprehensive rag benchmark

Reference 80

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:33:03.785713Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 3da186e8-03a7-42e3-a4fc-11b50ab9f50f · outbound

This paper cites HotpotQA: A Dataset for Diverse, Explainable Multi-hop Question Answering.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation HotpotQA: A Dataset for Diverse, Explainable Multi-hop Question Answering

Reference 81

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:59.543585Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a24b545a-b500-4a86-ba09-7fe218373904 · outbound

This paper cites EcoSafeRAG: Efficient Security through Context Analysis in Retrieval-Augmented Generation.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation EcoSafeRAG: Efficient Security through Context Analysis in Retrieval-Augmented Generation

Reference 82

Resolution: verified exact; local_arxiv, observed 2026-08-07T14:33:01.824614Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 3c3dd768-3858-4b86-a3ae-64f0cbae3c84 · outbound

This paper cites React: Synergizing reasoning and acting in language models.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation React: Synergizing reasoning and acting in language models

Reference 83

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:59.762327Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4abb05db-97fe-44d8-8124-7054cf98dd77 · outbound

This paper cites VisRAG: Vision-based Retrieval-augmented Generation on Multi-modality Documents.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation VisRAG: Vision-based Retrieval-augmented Generation on Multi-modality Documents

Reference 84

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:59.883563Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 126e37ed-acf7-4ace-89db-519f13d9ed63 · outbound

This paper cites Augmentation-Adapted Retriever Improves Generalization of Language Models as Generic Plug-In.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Augmentation-Adapted Retriever Improves Generalization of Language Models as Generic Plug-In

Reference 85

Resolution: unresolved; no resolver link, observed 2026-08-07T14:33:00.003486Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 82062636-8a73-4d13-bf89-ec7da18732a9 · outbound

This paper cites Rag-driver: Generalisable driving explanations with retrieval-augmented in-context learning in multi-modal large language model.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Rag-driver: Generalisable driving explanations with retrieval-augmented in-context learning in multi-modal large language model

Reference 86

Resolution: unresolved; no resolver link, observed 2026-08-07T14:33:00.106610Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5807f233-d77a-478e-9990-9eda9eb5250e · outbound

This paper cites Worse than zero-shot? a fact-checking dataset for evaluating the robustness of rag against misleading retrievals.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Worse than zero-shot? a fact-checking dataset for evaluating the robustness of rag against misleading retrievals

Reference 87

Resolution: unresolved; no resolver link, observed 2026-08-07T14:33:00.174389Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5405aeb7-8c82-41ac-afbe-09cf504416b0 · outbound

This paper cites Prac- tical poisoning attacks against retrieval-augmented generation.arXiv preprint arXiv:2504.03957, 2025.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Prac- tical poisoning attacks against retrieval-augmented generation.arXiv preprint arXiv:2504.03957, 2025

Reference 88

Resolution: unresolved; no resolver link, observed 2026-08-07T14:33:00.291225Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 43ee4f78-7ab8-46b4-b85b-c2fe9fa0e5e6 · outbound

This paper cites Traceback of poisoning attacks to retrieval-augmented generation.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Traceback of poisoning attacks to retrieval-augmented generation

Reference 89

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:33:03.643093Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 762e2534-1435-43ae-8809-1f94fcf01c5a · outbound

This paper cites HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models

Reference 90

Resolution: unresolved; no resolver link, observed 2026-08-07T14:33:00.474010Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3039fba3-61c1-4592-a67f-e6dc240e32cb · outbound

This paper cites Retrieval Augmented Generation and Understanding in Vision: A Survey and New Outlook.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Retrieval Augmented Generation and Understanding in Vision: A Survey and New Outlook

Reference 91

Resolution: unresolved; no resolver link, observed 2026-08-07T14:33:00.592379Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 98309379-6233-4c3a-a018-9a47b5a839bd · outbound

This paper cites Poisoning Retrieval Corpora by Injecting Adversarial Passages.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Poisoning Retrieval Corpora by Injecting Adversarial Passages

Reference 92

Resolution: unresolved; no resolver link, observed 2026-08-07T14:33:00.710112Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ff9632c2-972f-46cc-9595-ad9beed8f68c · outbound

This paper cites TrustRAG: Enhancing Robustness and Trustworthiness in Retrieval-Augmented Generation.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation TrustRAG: Enhancing Robustness and Trustworthiness in Retrieval-Augmented Generation

Reference 93

Resolution: unresolved; no resolver link, observed 2026-08-07T14:33:00.835351Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 326fd7ad-7c2b-4b08-8ad2-78965bd338d8 · outbound

This paper cites Trustworthiness in Retrieval-Augmented Generation Systems: A Survey.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Trustworthiness in Retrieval-Augmented Generation Systems: A Survey

Reference 94

Resolution: unresolved; no resolver link, observed 2026-08-07T14:33:00.919539Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bb8f74b6-d050-4ddb-90ca-f43407a4faae · outbound

This paper cites Black-Box Opinion Manipulation Attacks to Retrieval- Augmented Generation of Large Language Models.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Black-Box Opinion Manipulation Attacks to Retrieval- Augmented Generation of Large Language Models

Reference 95

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:33:03.498516Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 5d67b7c0-c373-4489-9c4d-1f2d00a4253b · outbound

This paper cites an unresolved cited work.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Unresolved cited work

Reference 96

Resolution: unresolved; raw_fallback, observed 2026-08-07T14:33:03.346808Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 6951ad8d-3dae-4e5f-8580-95152a033014 · outbound

This paper cites an unresolved cited work.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Unresolved cited work

Reference 97

Resolution: unresolved; raw_fallback, observed 2026-08-07T14:33:03.171172Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 35d8ab91-5b40-4207-8dea-15bfd4730770 · outbound

This paper cites an unresolved cited work.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation Unresolved cited work

Reference 98

Resolution: unresolved; raw_fallback, observed 2026-08-07T14:33:03.009966Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 9a6c75c7-028d-4474-94b1-d707242aa2c3 · outbound

This paper cites class" (standalone or non-standalone) and the.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation class" (standalone or non-standalone) and the

Reference 99

Resolution: verified fuzzy; raw_fallback, observed 2026-08-07T14:33:02.825102Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Pith citing papers

Observation ad58ddcf-7096-454f-a151-4e085f27729b · inbound

DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version) cites this paper.

DisarmRAG: Stealthy Retriever-Centric Poisoning to Disable Self-Correction in Retrieval-Augmented Generation (Extended Version) Benchmarking Poisoning Attacks against Retrieval-Augmented Generation

Reference 81

Resolution: unresolved; no resolver link, observed 2026-08-05T15:18:36.938530Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ab14dd36-08ab-453a-9f47-4b60ddb3c842 · inbound

SafeSearch: Automated Red-Teaming of LLM-Based Search Agents cites this paper.

SafeSearch: Automated Red-Teaming of LLM-Based Search Agents Benchmarking Poisoning Attacks against Retrieval-Augmented Generation

Reference 69

Resolution: unresolved; no resolver link, observed 2026-08-04T14:43:56.610925Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1717e7d8-6ee6-49d4-8634-cf2877b4504e · inbound

Benchmarking Knowledge-Extraction Attack and Defense on Retrieval-Augmented Generation cites this paper.

Benchmarking Knowledge-Extraction Attack and Defense on Retrieval-Augmented Generation Benchmarking Poisoning Attacks against Retrieval-Augmented Generation

Reference 39

Resolution: unresolved; no resolver link, observed 2026-08-03T03:04:47.779862Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d62086f3-1289-4a9d-9122-28d30bf569f6 · inbound

RAGShield: Detecting Numerical Claim Manipulation in Government RAG Systems cites this paper.

RAGShield: Detecting Numerical Claim Manipulation in Government RAG Systems Benchmarking Poisoning Attacks against Retrieval-Augmented Generation

Reference 11

Resolution: verified exact; arxiv_id, observed 2026-05-13T23:18:25.905684Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 34db4841-77b2-405e-9cc4-9e5b2f3cae30 · inbound

Beyond Explicit Refusals: Soft-Failure Attacks on Retrieval-Augmented Generation cites this paper.

Beyond Explicit Refusals: Soft-Failure Attacks on Retrieval-Augmented Generation Benchmarking Poisoning Attacks against Retrieval-Augmented Generation

Reference 6

Resolution: metadata mismatch; arxiv_id, observed 2026-05-10T11:05:08.995921Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 1a48d20e-4d14-47e9-8eec-0afedf1b35b6 · inbound

Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence cites this paper.

Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence Benchmarking Poisoning Attacks against Retrieval-Augmented Generation

Reference 62

Resolution: metadata mismatch; arxiv_id, observed 2026-05-11T11:31:00.568084Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 83afcb06-1e9c-4027-a6cc-d3f14ce00e72 · inbound

Oracle Poisoning: Corrupting Knowledge Graphs to Weaponise AI Agent Reasoning cites this paper.

Oracle Poisoning: Corrupting Knowledge Graphs to Weaponise AI Agent Reasoning Benchmarking Poisoning Attacks against Retrieval-Augmented Generation

Reference 31

Resolution: verified exact; arxiv_id, observed 2026-05-12T07:37:03.462355Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation d41c560b-076f-4b89-bed5-7b7230de202b · inbound

SilentRetrieval: Hijacking Retrieval-Augmented Generation via Semantically-Preserving Adversarial Data Poisoning cites this paper.

SilentRetrieval: Hijacking Retrieval-Augmented Generation via Semantically-Preserving Adversarial Data Poisoning Benchmarking Poisoning Attacks against Retrieval-Augmented Generation

Reference 34

Resolution: verified exact; arxiv_id, observed 2026-06-29T11:53:23.247611Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

Observation 61e0e649-2c5d-45e0-ba93-81d2ba35811d · inbound

TriShieldRAG: A Three-Ring Defense-in-Depth Framework Against Knowledge Corruption in Retrieval-Augmented Generation cites this paper.

TriShieldRAG: A Three-Ring Defense-in-Depth Framework Against Knowledge Corruption in Retrieval-Augmented Generation Benchmarking Poisoning Attacks against Retrieval-Augmented Generation

Reference 15

Resolution: unresolved; no resolver link, observed 2026-07-30T10:56:48.116996Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.