{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:U4WGGRMJ5DLNG76F35XPH5BALZ","short_pith_number":"pith:U4WGGRMJ","canonical_record":{"source":{"id":"2410.22832","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-30T09:15:51Z","cross_cats_sorted":["cs.AI","cs.IR"],"title_canon_sha256":"43a423edc7a5857af8d046e982e00255f572195d73dc8148f255994d5ff8886a","abstract_canon_sha256":"b70c23019140d35399952850922e1dc3ab423867e546e8c3dd37b6158f7e7a3f"},"schema_version":"1.0"},"canonical_sha256":"a72c634589e8d6d37fc5df6ef3f4205e6ec4739989f19039dc056f24e4b6f1ea","source":{"kind":"arxiv","id":"2410.22832","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.22832","created_at":"2026-07-05T09:28:36Z"},{"alias_kind":"arxiv_version","alias_value":"2410.22832v1","created_at":"2026-07-05T09:28:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.22832","created_at":"2026-07-05T09:28:36Z"},{"alias_kind":"pith_short_12","alias_value":"U4WGGRMJ5DLN","created_at":"2026-07-05T09:28:36Z"},{"alias_kind":"pith_short_16","alias_value":"U4WGGRMJ5DLNG76F","created_at":"2026-07-05T09:28:36Z"},{"alias_kind":"pith_short_8","alias_value":"U4WGGRMJ","created_at":"2026-07-05T09:28:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:U4WGGRMJ5DLNG76F35XPH5BALZ","target":"record","payload":{"canonical_record":{"source":{"id":"2410.22832","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-30T09:15:51Z","cross_cats_sorted":["cs.AI","cs.IR"],"title_canon_sha256":"43a423edc7a5857af8d046e982e00255f572195d73dc8148f255994d5ff8886a","abstract_canon_sha256":"b70c23019140d35399952850922e1dc3ab423867e546e8c3dd37b6158f7e7a3f"},"schema_version":"1.0"},"canonical_sha256":"a72c634589e8d6d37fc5df6ef3f4205e6ec4739989f19039dc056f24e4b6f1ea","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:28:36.836021Z","signature_b64":"TorxABusC7Gcaii/J8jUJs4Iu6xFr96RRfF7KJj3nTRC7pO1cHTnuEpX5FrlU/0g0lhrGXajdIT5AZyJ9kGJCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a72c634589e8d6d37fc5df6ef3f4205e6ec4739989f19039dc056f24e4b6f1ea","last_reissued_at":"2026-07-05T09:28:36.835577Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:28:36.835577Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.22832","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:28:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"I+ny2uvSSLgIwp2MRvwsDyImtNDzh2Tb84ANzWF4i/i2IJ79q0SlEyBWVoD00Cuy2n/kQQJNC6IHO2My3J9nBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T10:32:41.461903Z"},"content_sha256":"a7f62ee31a274763b7e2f84e4d7cb99e54c98920fd75f55970335317a9fb6036","schema_version":"1.0","event_id":"sha256:a7f62ee31a274763b7e2f84e4d7cb99e54c98920fd75f55970335317a9fb6036"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:U4WGGRMJ5DLNG76F35XPH5BALZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.IR"],"primary_cat":"cs.CR","authors_text":"Jianwei Yin, Qinfeng Li, Tianyu Du, Xinkui Zhao, Xuhong Zhang, Yucheng Zhang, Zhengwen Feng","submitted_at":"2024-10-30T09:15:51Z","abstract_excerpt":"Retrieval-Augmented Generation (RAG) systems enhance large language models (LLMs) by integrating external knowledge, making them adaptable and cost-effective for various applications. However, the growing reliance on these systems also introduces potential security risks. In this work, we reveal a novel vulnerability, the retrieval prompt hijack attack (HijackRAG), which enables attackers to manipulate the retrieval mechanisms of RAG systems by injecting malicious texts into the knowledge database. When the RAG system encounters target questions, it generates the attacker's pre-determined answ"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.22832","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.22832/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:28:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"htHPV2uZBgUtoZYAFdbWxw5wenm+IXJO4PV39g4tdpggT62GuiBQ3QpZc4MLzBdhVs6irqzVuByLj9dOo1HdDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T10:32:41.462495Z"},"content_sha256":"58f21bd36580a21fdde679f6bbb4ae2cae7cb8fb766f2842f6c832d04912baa0","schema_version":"1.0","event_id":"sha256:58f21bd36580a21fdde679f6bbb4ae2cae7cb8fb766f2842f6c832d04912baa0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/U4WGGRMJ5DLNG76F35XPH5BALZ/bundle.json","state_url":"https://pith.science/pith/U4WGGRMJ5DLNG76F35XPH5BALZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/U4WGGRMJ5DLNG76F35XPH5BALZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T10:32:41Z","links":{"resolver":"https://pith.science/pith/U4WGGRMJ5DLNG76F35XPH5BALZ","bundle":"https://pith.science/pith/U4WGGRMJ5DLNG76F35XPH5BALZ/bundle.json","state":"https://pith.science/pith/U4WGGRMJ5DLNG76F35XPH5BALZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/U4WGGRMJ5DLNG76F35XPH5BALZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:U4WGGRMJ5DLNG76F35XPH5BALZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b70c23019140d35399952850922e1dc3ab423867e546e8c3dd37b6158f7e7a3f","cross_cats_sorted":["cs.AI","cs.IR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-30T09:15:51Z","title_canon_sha256":"43a423edc7a5857af8d046e982e00255f572195d73dc8148f255994d5ff8886a"},"schema_version":"1.0","source":{"id":"2410.22832","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.22832","created_at":"2026-07-05T09:28:36Z"},{"alias_kind":"arxiv_version","alias_value":"2410.22832v1","created_at":"2026-07-05T09:28:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.22832","created_at":"2026-07-05T09:28:36Z"},{"alias_kind":"pith_short_12","alias_value":"U4WGGRMJ5DLN","created_at":"2026-07-05T09:28:36Z"},{"alias_kind":"pith_short_16","alias_value":"U4WGGRMJ5DLNG76F","created_at":"2026-07-05T09:28:36Z"},{"alias_kind":"pith_short_8","alias_value":"U4WGGRMJ","created_at":"2026-07-05T09:28:36Z"}],"graph_snapshots":[{"event_id":"sha256:58f21bd36580a21fdde679f6bbb4ae2cae7cb8fb766f2842f6c832d04912baa0","target":"graph","created_at":"2026-07-05T09:28:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.22832/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Retrieval-Augmented Generation (RAG) systems enhance large language models (LLMs) by integrating external knowledge, making them adaptable and cost-effective for various applications. However, the growing reliance on these systems also introduces potential security risks. In this work, we reveal a novel vulnerability, the retrieval prompt hijack attack (HijackRAG), which enables attackers to manipulate the retrieval mechanisms of RAG systems by injecting malicious texts into the knowledge database. When the RAG system encounters target questions, it generates the attacker's pre-determined answ","authors_text":"Jianwei Yin, Qinfeng Li, Tianyu Du, Xinkui Zhao, Xuhong Zhang, Yucheng Zhang, Zhengwen Feng","cross_cats":["cs.AI","cs.IR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-30T09:15:51Z","title":"HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.22832","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a7f62ee31a274763b7e2f84e4d7cb99e54c98920fd75f55970335317a9fb6036","target":"record","created_at":"2026-07-05T09:28:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b70c23019140d35399952850922e1dc3ab423867e546e8c3dd37b6158f7e7a3f","cross_cats_sorted":["cs.AI","cs.IR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-30T09:15:51Z","title_canon_sha256":"43a423edc7a5857af8d046e982e00255f572195d73dc8148f255994d5ff8886a"},"schema_version":"1.0","source":{"id":"2410.22832","kind":"arxiv","version":1}},"canonical_sha256":"a72c634589e8d6d37fc5df6ef3f4205e6ec4739989f19039dc056f24e4b6f1ea","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a72c634589e8d6d37fc5df6ef3f4205e6ec4739989f19039dc056f24e4b6f1ea","first_computed_at":"2026-07-05T09:28:36.835577Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:28:36.835577Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"TorxABusC7Gcaii/J8jUJs4Iu6xFr96RRfF7KJj3nTRC7pO1cHTnuEpX5FrlU/0g0lhrGXajdIT5AZyJ9kGJCw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:28:36.836021Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.22832","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a7f62ee31a274763b7e2f84e4d7cb99e54c98920fd75f55970335317a9fb6036","sha256:58f21bd36580a21fdde679f6bbb4ae2cae7cb8fb766f2842f6c832d04912baa0"],"state_sha256":"63a398dc886cab84ff7521d09098b2b47b8eb1197ff8f389e4bf769acf25e1e1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"B0LdLupkAX6d5kzCZQGqPDywxkW0sSKLI0XelGNdymilzQhrRZhH+sQBWu+oPAns/dxo4MvLMWFApaq7m1CECg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T10:32:41.466630Z","bundle_sha256":"51ec6517c8657b3e5928061264d60250ad9befe93f49eb5eec10def130055d55"}}