Benchmarking Poisoning Attacks against Retrieval-Augmented Generation
Date: 2025-05
Affected: RAG-backed LLM systems generally
Attack vector: model-poisoning
Category: research
Severity: High

Comprehensive benchmark of 13 RAG poisoning attacks vs 7 defenses across 5 QA datasets and 10 variants, showing current defenses fail to provide robust protection in realistic settings.


Mitigations:

Architectural layers (MAESTRO):