Updated 7/20/2026
M3Att demonstrates a reproducible knowledge-poisoning issue in medical multimodal RAG: an attacker with limited corpus-distribution knowledge can insert paired image-text entries whose visually perturbed images are broadly retrieved and whose clinically plausible misinformation steers downstream generation. The paper evaluates both white-box and black-box retrieval optimization and reports degraded diagnostic and report-generation utility across multiple datasets, retrievers, and LVLMs. These…
Knowledge Poisoning Attacks on Medical Multi-Modal Retrieval-Augmented Generation
Affects: GPT-4o, GPT-5 Chat, Gemini 2.5 Flash +5 more
Source: arXiv