Query-Agnostic Poisoning of Medical Multimodal RAG
Published Analyzed Source: arXiv
M3Att demonstrates a reproducible knowledge-poisoning issue in medical multimodal RAG: an attacker with limited corpus-distribution knowledge can insert paired image-text entries whose visually perturbed images are broadly retrieved and whose clinically plausible misinformation steers downstream generation. The paper evaluates both white-box and black-box retrieval optimization and reports degraded diagnostic and report-generation utility across multiple datasets, retrievers, and LVLMs. These…
Knowledge Poisoning Attacks on Medical Multi-Modal Retrieval-Augmented Generation
Evaluated models: GPT-4o, GPT-5 Chat, Gemini 2.5 Flash+5 more
- GPT-4o
- GPT-5 Chat
- Gemini 2.5 Flash
- Claude Haiku 4.5
- LLaVA Med
- CLIP ViT-Large-Patch14-336
- BGE-VL-base
- SigLIP-SO400M-Patch14-384