BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models | Paper Citation Record

Observation 91c34bd6-2743-4ffa-862f-9cf9a5233a5f · inbound

Trustworthiness in Retrieval-Augmented Generation Systems: A Survey cites this paper.

Trustworthiness in Retrieval-Augmented Generation Systems: A Survey BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 83

Resolution: verified exact; arxiv_id, observed 2026-05-23T21:08:25.872258Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 57bdddbd-4d4e-4769-aa0a-05e97aa9a9fd · inbound

LLM-based Multi-Agent Systems: Techniques and Business Perspectives cites this paper.

LLM-based Multi-Agent Systems: Techniques and Business Perspectives BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 76

Resolution: unresolved; no resolver link, observed 2026-08-12T15:40:35.955486Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e119561a-e9c9-4659-a5b8-f3d84e5bb700 · inbound

RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis cites this paper.

RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 41

Resolution: unresolved; no resolver link, observed 2026-08-12T10:47:45.854995Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ca842eed-6b4d-40c3-b8d7-7fa13c1a3e7f · inbound

Adversarial Hubness in Multi-Modal Retrieval cites this paper.

Adversarial Hubness in Multi-Modal Retrieval BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 83

Resolution: verified exact; arxiv_id, observed 2026-05-23T06:42:39.713826Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 5537bfca-eead-4237-8e25-2516f48af2d8 · inbound

Towards More Robust Retrieval-Augmented Generation: Evaluating RAG Under Adversarial Poisoning Attacks cites this paper.

Towards More Robust Retrieval-Augmented Generation: Evaluating RAG Under Adversarial Poisoning Attacks BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-11T10:24:21.766041Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0f91a13e-9077-4d71-b0da-521b754aba00 · inbound

Poison-RAG: Adversarial Data Poisoning Attacks on Retrieval-Augmented Generation in Recommender Systems cites this paper.

Poison-RAG: Adversarial Data Poisoning Attacks on Retrieval-Augmented Generation in Recommender Systems BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-10T17:59:56.242423Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6a777596-80af-48c8-b0b4-4dfd32229065 · inbound

Large Language Model Adversarial Landscape Through the Lens of Attack Objectives cites this paper.

Large Language Model Adversarial Landscape Through the Lens of Attack Objectives BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-09T10:29:49.926458Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 50cbaac6-80e9-4565-9536-9910388087cd · inbound

A Survey on Backdoor Threats in Large Language Models (LLMs): Attacks, Defenses, and Evaluations cites this paper.

A Survey on Backdoor Threats in Large Language Models (LLMs): Attacks, Defenses, and Evaluations BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 124

Resolution: unresolved; no resolver link, observed 2026-08-09T00:50:00.462314Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 77e3b112-7ac1-4b2e-8873-37430cddf51a · inbound

Towards Trustworthy Retrieval Augmented Generation for Large Language Models: A Survey cites this paper.

Towards Trustworthy Retrieval Augmented Generation for Large Language Models: A Survey BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 209

Resolution: unresolved; no resolver link, observed 2026-08-08T19:15:25.682451Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 83841e1d-6853-490e-b055-5e9df4993c5c · inbound

Distributed Retrieval-Augmented Generation cites this paper.

Distributed Retrieval-Augmented Generation BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-16T04:46:38.693465Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a57a277e-e644-4f01-b244-d976d12d1cd5 · inbound

Stealthy LLM-Driven Data Poisoning Attacks Against Embedding-Based Retrieval-Augmented Recommender Systems cites this paper.

Stealthy LLM-Driven Data Poisoning Attacks Against Embedding-Based Retrieval-Augmented Recommender Systems BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-15T23:12:44.418510Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1c5c31c7-35b8-4c97-a78f-f997e012a571 · inbound

POISONCRAFT: Practical Poisoning of Retrieval-Augmented Generation for Large Language Models cites this paper.

POISONCRAFT: Practical Poisoning of Retrieval-Augmented Generation for Large Language Models BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-15T22:43:05.999906Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4491e144-20db-40d9-9160-c339949e7d54 · inbound

Safety Degradation in AI Agents cites this paper.

Safety Degradation in AI Agents BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-07T15:41:04.455697Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d7afac52-f6a5-4c8d-ab70-f10d27949b6a · inbound

Scalable Defense against In-the-wild Jailbreaking Attacks with Safety Context Retrieval cites this paper.

Scalable Defense against In-the-wild Jailbreaking Attacks with Safety Context Retrieval BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 47

Resolution: unresolved; no resolver link, observed 2026-08-07T15:15:48.764754Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 54b84ce8-fc91-443f-846e-7b6b4fadf8e4 · inbound

Ranking Free RAG: Replacing Re-ranking with Selection in RAG for Sensitive Domains cites this paper.

Ranking Free RAG: Replacing Re-ranking with Selection in RAG for Sensitive Domains BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 53

Resolution: unresolved; no resolver link, observed 2026-08-07T15:14:49.451675Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 328b8b7c-44b9-4a1d-b583-a54246d7c18b · inbound

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation cites this paper.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 78

Resolution: unresolved; no resolver link, observed 2026-08-07T14:32:59.243279Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4265ee53-a561-4244-b577-fe49af649332 · inbound

The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems cites this paper.

The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 44

Resolution: unresolved; no resolver link, observed 2026-08-07T14:36:35.283940Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bc749ad0-d4f3-4c11-bf0d-2d2ea5713ce2 · inbound

Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM cites this paper.

Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-07T13:21:40.107539Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ffc3afd1-f751-4182-93cf-2015b845a542 · inbound

Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems cites this paper.

Adversarial Threat Vectors and Risk Mitigation for Retrieval-Augmented Generation Systems BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-07T12:11:28.794640Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 30727c9b-87cd-4495-9751-505a1b88a8f0 · inbound

Across Programming Language Silos: A Study on Cross-Lingual Retrieval-augmented Code Generation cites this paper.

Across Programming Language Silos: A Study on Cross-Lingual Retrieval-augmented Code Generation BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 59

Resolution: verified exact; arxiv_id, observed 2026-05-19T11:53:03.501566Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 658ee460-5d59-4cf6-96ba-1e980303fe72 · inbound

Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMs cites this paper.

Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMs BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-07T04:15:38.811538Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ea89fa41-4b5d-4873-956e-81c0cf00e772 · inbound

The Hidden Threat in Plain Text: Attacking RAG Data Loaders cites this paper.

The Hidden Threat in Plain Text: Attacking RAG Data Loaders BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-06T19:37:31.612720Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bd98b675-2cd0-452f-9148-10e4c1c99f82 · inbound

RAG Safety: Exploring Knowledge Poisoning Attacks to Retrieval-Augmented Generation cites this paper.

RAG Safety: Exploring Knowledge Poisoning Attacks to Retrieval-Augmented Generation BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 43

Resolution: unresolved; no resolver link, observed 2026-08-06T19:01:14.676455Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ea27f41a-2e62-4e1a-8a1a-c919c5fc8c86 · inbound

DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection cites this paper.

DeRAG: Black-box Adversarial Attacks on Multiple Retrieval-Augmented Generation Applications via Prompt Injection BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-06T15:48:57.340757Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation da8ed986-5354-434a-80d0-a496ca3b8b19 · inbound

Safeguarding RAG Pipelines with GMTP: A Gradient-based Masked Token Probability Method for Poisoned Document Detection cites this paper.

Safeguarding RAG Pipelines with GMTP: A Gradient-based Masked Token Probability Method for Poisoned Document Detection BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 42

Resolution: unresolved; no resolver link, observed 2026-08-06T14:42:08.191718Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 08462dd7-d85c-4a84-a538-ed61b761a77a · inbound

Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation cites this paper.

Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 166

Resolution: unresolved; no resolver link, observed 2026-08-05T20:31:48.207577Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6dc4a9c9-443a-4cc7-a372-be7f1c2d2c19 · inbound

Fact or Facsimile? Evaluating the Factual Robustness of Modern Retrievers cites this paper.

Fact or Facsimile? Evaluating the Factual Robustness of Modern Retrievers BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-05T15:09:22.340790Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 0698889b-9b55-4363-ba93-fe97c98b0fb0 · inbound

Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain cites this paper.

Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 80

Resolution: unresolved; no resolver link, observed 2026-08-05T10:44:10.621289Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b26f408d-5189-41ab-a288-c7e12d97b416 · inbound

ImportSnare: Directed "Code Manual" Hijacking in Retrieval-Augmented Code Generation cites this paper.

ImportSnare: Directed "Code Manual" Hijacking in Retrieval-Augmented Code Generation BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 47

Resolution: unresolved; no resolver link, observed 2026-08-04T21:33:59.967456Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3a168799-fe6d-494c-bb28-33b08b53e1ab · inbound

RAG Security and Privacy: Formalizing the Threat Model and Attack Surface cites this paper.

RAG Security and Privacy: Formalizing the Threat Model and Attack Surface BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-04T15:17:39.491503Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d356bdc1-be44-41b7-b443-d3ac88d87d01 · inbound

Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval cites this paper.

Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-03T19:27:04.056271Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bc236d1a-094c-4300-ab84-70e0ffb8542c · inbound

Agents at Risk: How Users Unwittingly Undermine LLM Safety cites this paper.

Agents at Risk: How Users Unwittingly Undermine LLM Safety BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 36

Resolution: unresolved; no resolver link, observed 2026-08-03T10:45:19.715096Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 97e2bfd2-6c13-4d05-aa86-599386e4e2a0 · inbound

Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems cites this paper.

Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 51

Resolution: verified exact; arxiv_id, observed 2026-05-11T10:06:02.826341Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation b44c9ca2-2724-483c-9763-091d363ca56e · inbound

Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems cites this paper.

Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 51

Resolution: verified exact; arxiv_id, observed 2026-05-11T04:20:58.075095Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 55b8bb75-59f6-48f7-86ec-6c4871aa7226 · inbound

Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems cites this paper.

Catching the Infection Before It Spreads: Foresight-Guided Defense in Multi-Agent Systems BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 50

Resolution: verified exact; arxiv_id, observed 2026-05-15T07:15:11.971658Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 5c3a5328-e2de-447d-9e58-e1cc91352e7c · inbound

Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence cites this paper.

Needle-in-RAG: Prompt-Conditioned Character-Level Traceback of Poisoned Spans in Retrieved Evidence BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 54

Resolution: metadata mismatch; arxiv_id, observed 2026-05-11T11:31:00.719023Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 8e5ad112-4320-450b-87a6-d2e016e660f8 · inbound

MEMSAD: Gradient-Coupled Anomaly Detection for Memory Poisoning in Retrieval-Augmented Agents cites this paper.

MEMSAD: Gradient-Coupled Anomaly Detection for Memory Poisoning in Retrieval-Augmented Agents BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 14

Resolution: verified exact; arxiv_id, observed 2026-05-12T00:01:14.200165Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 6eb55303-672c-4096-b1e2-6793bb57973b · inbound

MEMSAD: Gradient-Coupled Anomaly Detection for Memory Poisoning in Retrieval-Augmented Agents cites this paper.

MEMSAD: Gradient-Coupled Anomaly Detection for Memory Poisoning in Retrieval-Augmented Agents BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 14

Resolution: verified exact; arxiv_id, observed 2026-05-09T06:10:41.480515Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 9b532e46-4267-4f61-b014-7bcec7b64b37 · inbound

ShadowMerge: A Novel Poisoning Attack on Graph-Based Agent Memory via Relation-Channel Conflicts cites this paper.

ShadowMerge: A Novel Poisoning Attack on Graph-Based Agent Memory via Relation-Channel Conflicts BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 26

Resolution: verified exact; arxiv_id, observed 2026-05-12T07:37:06.910242Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 6b7266d8-8364-4ec0-96f7-3f3284ce1d61 · inbound

ShadowMerge: A Novel Poisoning Attack on Graph-Based Agent Memory via Relation-Channel Conflicts cites this paper.

ShadowMerge: A Novel Poisoning Attack on Graph-Based Agent Memory via Relation-Channel Conflicts BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 26

Resolution: verified exact; arxiv_id, observed 2026-05-15T06:09:49.285246Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 47df3c3a-d0fa-402d-bb84-dec322ccf0a5 · inbound

ShadowMerge: A Novel Poisoning Attack on Graph-Based Agent Memory via Relation-Channel Conflicts cites this paper.

ShadowMerge: A Novel Poisoning Attack on Graph-Based Agent Memory via Relation-Channel Conflicts BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 26

Resolution: verified exact; arxiv_id, observed 2026-05-19T17:42:42.322138Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 4a43d873-cb4e-48c2-aed4-b37a706d047f · inbound

Oracle Poisoning: Corrupting Knowledge Graphs to Weaponise AI Agent Reasoning cites this paper.

Oracle Poisoning: Corrupting Knowledge Graphs to Weaponise AI Agent Reasoning BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 28

Resolution: verified exact; arxiv_id, observed 2026-05-12T07:37:04.167030Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation bef98505-0f5b-411d-a8bf-a460bd48ddf7 · inbound

BadSKP: Backdoor Attacks on Knowledge Graph-Enhanced LLMs with Soft Prompts cites this paper.

BadSKP: Backdoor Attacks on Knowledge Graph-Enhanced LLMs with Soft Prompts BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 24

Resolution: verified exact; arxiv_id, observed 2026-05-13T05:12:17.840776Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 70b3c23b-d66a-4024-b56b-75b3aea22579 · inbound

RADAR: Defending RAG Dynamically against Retrieval Corruption cites this paper.

RADAR: Defending RAG Dynamically against Retrieval Corruption BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 11

Resolution: verified exact; arxiv_id, observed 2026-05-22T06:01:08.946270Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation eb22206c-65a4-4f8b-9a37-b080c9baabbe · inbound

SilentRetrieval: Hijacking Retrieval-Augmented Generation via Semantically-Preserving Adversarial Data Poisoning cites this paper.

SilentRetrieval: Hijacking Retrieval-Augmented Generation via Semantically-Preserving Adversarial Data Poisoning BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 32

Resolution: verified exact; arxiv_id, observed 2026-06-29T11:53:23.276673Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 3f50070c-d0bb-4aab-a2ab-00f6a455b65e · inbound

DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation cites this paper.

DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 40

Resolution: verified exact; arxiv_id, observed 2026-07-01T20:46:13.965582Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 98b64758-2bfc-4225-b2ea-c19ab634e4bb · inbound

ImageAuditor: Membership Inference Attack against Image-based Retrieval-Augmented Generation cites this paper.

ImageAuditor: Membership Inference Attack against Image-based Retrieval-Augmented Generation BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 39

Resolution: verified exact; arxiv_id, observed 2026-07-02T03:26:29.518497Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 2857d78b-0fdd-48b9-b79f-9b36cab6b428 · inbound

Evaluating RAG Reliability under Clean, Misleading, and Mixed Retrieval cites this paper.

Evaluating RAG Reliability under Clean, Misleading, and Mixed Retrieval BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 17

Resolution: verified exact; arxiv_id, observed 2026-07-02T18:57:16.554219Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 22ed9aac-637c-4036-986c-aba0c7161e10 · inbound

Incumbent Advantage: Brand Bias and Cognitive Manipulation Dynamics in LLM Recommendation Systems cites this paper.

Incumbent Advantage: Brand Bias and Cognitive Manipulation Dynamics in LLM Recommendation Systems BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 20

Resolution: verified exact; arxiv_id, observed 2026-07-03T20:08:55.781044Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation e566a183-4f0b-456a-9d6a-d0607974a524 · inbound

Conflict-Aware Retriever Editing for Knowledge Injection Attacks on LLM-Based RAG Systems cites this paper.

Conflict-Aware Retriever Editing for Knowledge Injection Attacks on LLM-Based RAG Systems BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 8

Resolution: verified exact; arxiv_id, observed 2026-07-03T21:28:59.101853Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation aa3bdd1d-adb2-447d-851a-caad10033dd2 · inbound

REALM: A Unified Red-Teaming Benchmark for Physical-World VLMs cites this paper.

REALM: A Unified Red-Teaming Benchmark for Physical-World VLMs BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 35

Resolution: verified exact; arxiv_id, observed 2026-07-04T10:29:45.744501Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 213c305a-3481-42fa-b2a1-101e37b2b6b3 · inbound

Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems cites this paper.

Security and Privacy in Retrieval-Augmented Generation: Architectures, Threats, Defenses, and Future Directions for Building Trustworthy Systems BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 24

Resolution: verified exact; arxiv_id, observed 2026-07-04T20:00:07.859278Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 6e1ab760-3a35-4b45-ba72-c0e6102bcea5 · inbound

PRA-RAG: Provably Robust Aggregation in Retrieval-Augmented Generation against Retrieval Corruption cites this paper.

PRA-RAG: Provably Robust Aggregation in Retrieval-Augmented Generation against Retrieval Corruption BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 128

Resolution: verified exact; arxiv_id, observed 2026-07-02T23:47:27.213076Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 232c078d-9864-487a-84a5-2c5a3c7add66 · inbound

A Failure-Mode Benchmark for Polymorphic Sybil Poisoning in RAG cites this paper.

A Failure-Mode Benchmark for Polymorphic Sybil Poisoning in RAG BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 9

Resolution: unresolved; no resolver link, observed 2026-07-12T00:17:10.365724Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d669d442-fdad-44ba-a64d-6e84070b1c76 · inbound

Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability cites this paper.

Large Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 215

Resolution: unresolved; no resolver link, observed 2026-07-14T12:01:22.824663Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9086b9e9-e56c-4c1d-87fd-60e0ec848a83 · inbound

Salience Induction against Multi-Hop RAG Agents: Threat and Defense cites this paper.

Salience Induction against Multi-Hop RAG Agents: Threat and Defense BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 2024

Resolution: unresolved; no resolver link, observed 2026-08-01T17:47:13.420601Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 773c8ce7-9fb7-439e-bfb2-53574988c585 · inbound

DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial cites this paper.

DenialRAG: Single-Document RAG Poisoning via Embedded Parametric Denial BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-06T00:08:56.979447Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 630011d5-95b3-47a7-90bd-cc0e7b280b2d · inbound

PURPOSE: Poisoning Conflict Resolution in RAG via Proxy-Fact-Grounded Updates cites this paper.

PURPOSE: Poisoning Conflict Resolution in RAG via Proxy-Fact-Grounded Updates BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-06T17:25:42.532072Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ef5ad5f2-7b23-4350-808d-0ac5132f80f3 · inbound

Mechanism Design for Generative Engines: From Exploitation toward Win-Win Outcomes cites this paper.

Mechanism Design for Generative Engines: From Exploitation toward Win-Win Outcomes BadRAG: Identifying Vulnerabilities in Retrieval Augmented Generation of Large Language Models

Reference 45

Resolution: unresolved; no resolver link, observed 2026-08-15T14:17:45.914778Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Coverage vector

Reference resolution

Outbound references

Pith citing papers