MLM Adaptive RAG Poisoning
Published Analyzed Source: arXiv
A vulnerability exists in Retrieval-Augmented Generation (RAG) systems that allows for black-box adversarial attacks known as "CtrlRAG." This flaw allows an attacker to manipulate the generation of Large Language Models (LLMs) by injecting maliciously crafted inputs into the system's knowledge base. Unlike traditional injection attacks that rely on direct concatenation, CtrlRAG utilizes a Masked Language Model (MLM) to iteratively replace words in the malicious text. This optimization ensures…
CtrlRAG: Black-box Document Poisoning Attacks for Retrieval-Augmented Generation of Large Language Models
Evaluated models: GPT-4 Turbo, GPT-4o, Claude 3.5 Sonnet+2 more
- GPT-4 Turbo
- GPT-4o
- Claude 3.5 Sonnet
- DeepSeek V3
- DeepSeek R1