Practical Poisoning Attacks against Retrieval-Augmented Generation
Date: 2025-04
Affected: RAG systems with embedding-based retrievers
Attack vector: model-poisoning
Category: research
Severity: High

Wei et al. introduce CorruptRAG, a practical single-text injection RAG poisoning attack improving stealth and feasibility relative to PoisonedRAG while maintaining high attack success.


Mitigations:

Architectural layers (MAESTRO):