RAG Poisoning: How Retrieval-Augmented Generation Systems Get Compromised

RAG systems inherit all the vulnerabilities of LLMs and add a new one: the retrieval corpus. Injecting malicious content into retrieved sources can hijack model behavior in ways users and operators don't see coming.