{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:CV2HR27LMDATBCFTI43GBIIYPH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"28a87511393446bb636219cf4489de0d06302d7f1d6820d57686812ea5e14390","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-04-30T14:18:11Z","title_canon_sha256":"d30c1ad37cc6439434823677193b2c563250ccce707933e807251738573ac278"},"schema_version":"1.0","source":{"id":"2504.21680","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.21680","created_at":"2026-07-05T10:56:27Z"},{"alias_kind":"arxiv_version","alias_value":"2504.21680v1","created_at":"2026-07-05T10:56:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.21680","created_at":"2026-07-05T10:56:27Z"},{"alias_kind":"pith_short_12","alias_value":"CV2HR27LMDAT","created_at":"2026-07-05T10:56:27Z"},{"alias_kind":"pith_short_16","alias_value":"CV2HR27LMDATBCFT","created_at":"2026-07-05T10:56:27Z"},{"alias_kind":"pith_short_8","alias_value":"CV2HR27L","created_at":"2026-07-05T10:56:27Z"}],"graph_snapshots":[{"event_id":"sha256:45a54a5fce570399b7145405262f2814c5210d92be712b4284be6245dcc15be7","target":"graph","created_at":"2026-07-05T10:56:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.21680/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Retrieval-Augmented Generation (RAG) integrates Large Language Models (LLMs) with external knowledge bases, improving output quality while introducing new security risks. Existing studies on RAG vulnerabilities typically focus on exploiting the retrieval mechanism to inject erroneous knowledge or malicious texts, inducing incorrect outputs. However, these approaches overlook critical weaknesses within LLMs, leaving important attack vectors unexplored and limiting the scope and efficiency of attacks. In this paper, we uncover a novel vulnerability: the safety guardrails of LLMs, while designed ","authors_text":"Pan Suo, San-Chuan Guo, Xi Zhang, Yu-Ming Shang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-04-30T14:18:11Z","title":"Hoist with His Own Petard: Inducing Guardrails to Facilitate Denial-of-Service Attacks on Retrieval-Augmented Generation of LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.21680","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4fcd56cd0f69192a7c739b5f07b021a20ae41a5950dc9066fdb344a0f1a2e567","target":"record","created_at":"2026-07-05T10:56:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"28a87511393446bb636219cf4489de0d06302d7f1d6820d57686812ea5e14390","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-04-30T14:18:11Z","title_canon_sha256":"d30c1ad37cc6439434823677193b2c563250ccce707933e807251738573ac278"},"schema_version":"1.0","source":{"id":"2504.21680","kind":"arxiv","version":1}},"canonical_sha256":"157478ebeb60c13088b3473660a11879e2091f15d3e743a5b292cc021ce8956b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"157478ebeb60c13088b3473660a11879e2091f15d3e743a5b292cc021ce8956b","first_computed_at":"2026-07-05T10:56:27.631602Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:56:27.631602Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"yjqONUC2djSfKscpjwczWK7PrpEMRdt29YbbtezYIKidHlwnbVV7LGa9GoE3bRx216jt7PNexj80qHAabYLOAA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:56:27.632108Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.21680","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4fcd56cd0f69192a7c739b5f07b021a20ae41a5950dc9066fdb344a0f1a2e567","sha256:45a54a5fce570399b7145405262f2814c5210d92be712b4284be6245dcc15be7"],"state_sha256":"78aa13d112eb72a203f1020e0adc95c0abf1478b09e41207c0c1fbe7cfcbcd93"}