{"as_of":"2026-08-19T13:20:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:519e5dc712bbda790526283966ff639b88eccbfc7a9b0dc80b65187e93dbb28c","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":86,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":86,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":86,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":86,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T12:19:16.802570Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"arxiv_reference","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":11,"observed_at":"2026-08-05T02:28:24.338817Z","source":"arxiv_reference"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2409.10102","last_updated":"2026-05-16T07:15:07Z","snapshot_observed_at":"2026-08-18T22:04:54.389885Z","submitted_at":"2024-09-16T09:06:44Z","title":"Trustworthiness in Retrieval-Augmented Generation Systems: A Survey","version":2},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-05-23T21:08:11.787013Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2409.10102"},"observation_digest":"sha256:29812e619d75bdc23871c591238a8f6b3c137228cbabf4b33f263e3daa28b3ef","observation_id":"ddc5813a-0da8-494c-adcf-dcd084547565","resolution":{"observed_at":"2026-05-23T21:08:25.779893Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2410.02644","last_updated":"2025-05-30T03:50:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-10-03T16:30:47Z","title":"Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agents","version":4},"reference_index":165,"source":"arxiv_source","source_observed_at":"2026-05-12T13:36:57.011451Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2410.02644"},"observation_digest":"sha256:894136b89699e04e813ea53e1461cee8966feb85f92564a02eadea570fd4303d","observation_id":"70944d01-9635-4dee-bbca-acf15024df61","resolution":{"observed_at":"2026-05-12T13:36:57.079379Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-12T18:38:43.961438Z","title":"”Poisonedrag: Knowledge poisoning attacks to retrieval-augmented generation of large language models.” arXiv preprint arXiv:2402.07867 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.11407","last_updated":"2024-11-18T09:28:58Z","snapshot_observed_at":"2026-08-15T04:36:37.002692Z","submitted_at":"2024-11-18T09:28:58Z","title":"The Dark Side of Trust: Authority Citation-Driven Jailbreak Attacks on Large Language Models","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-12T18:38:43.961438Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2411.11407"},"observation_digest":"sha256:47897f2e2b9e8adea3fb35d0e543873b338a7817195d1c751c5a0324a3a63d31","observation_id":"307d9157-6827-46a3-9610-336acdc3a7a5","resolution":{"observed_at":"2026-08-12T18:38:43.961438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-12T10:47:45.879873Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.18948","last_updated":"2025-08-29T06:03:42Z","snapshot_observed_at":"2026-08-15T06:21:38.235121Z","submitted_at":"2024-11-28T06:29:46Z","title":"RevPRAG: Revealing Poisoning Attacks in Retrieval-Augmented Generation through LLM Activation Analysis","version":5},"reference_index":46,"source":"arxiv_source","source_observed_at":"2026-08-12T10:47:45.879873Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2411.18948"},"observation_digest":"sha256:b8889b104aae6d8e0add9d45dbff048733560e14c46518115816843e85059255","observation_id":"221bd099-962e-4ceb-abdc-b0dc605dd0a0","resolution":{"observed_at":"2026-08-12T10:47:45.879873Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-11T16:17:43.494389Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.10198","last_updated":"2025-02-07T13:26:18Z","snapshot_observed_at":"2026-08-16T03:43:40.241163Z","submitted_at":"2024-12-13T15:15:24Z","title":"From Allies to Adversaries: Manipulating LLM Tool-Calling through Adversarial Injection","version":2},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-11T16:17:43.494389Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2412.10198"},"observation_digest":"sha256:ba5268cf93d4b1b18fa2728271acdc310da56df7ffd63fb258eeb0ec899f0986","observation_id":"9d890f49-ea25-47dc-a194-15dab11e8c61","resolution":{"observed_at":"2026-08-11T16:17:43.494389Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2412.14113","last_updated":"2026-05-14T17:15:02Z","snapshot_observed_at":"2026-08-15T00:26:07.604869Z","submitted_at":"2024-12-18T17:58:58Z","title":"Adversarial Hubness in Multi-Modal Retrieval","version":4},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-05-23T06:39:36.039613Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2412.14113"},"observation_digest":"sha256:9a47f2f6521e1f18ba75198127a8d8dde845162e660d4f28df3b911bdf55e98c","observation_id":"caa1e885-fbf4-4577-9274-2b7c1b1bba02","resolution":{"observed_at":"2026-05-23T06:42:39.708087Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-11T10:24:21.794378Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2412.16708","last_updated":"2025-07-26T16:31:50Z","snapshot_observed_at":"2026-08-19T03:21:09.209606Z","submitted_at":"2024-12-21T17:31:52Z","title":"Towards More Robust Retrieval-Augmented Generation: Evaluating RAG Under Adversarial Poisoning Attacks","version":2},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-11T10:24:21.794378Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2412.16708"},"observation_digest":"sha256:0f7d181654d279105a49b765f054194bff698ec23576baea0ceaff61fb51448a","observation_id":"60b84998-89ef-44e9-97d6-49703b058052","resolution":{"observed_at":"2026-08-11T10:24:21.794378Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-10T21:18:38.328637Z","title":"What is the relationship between 𝑒𝑖𝑤𝑚 and𝑒𝑗 𝑤𝑚?","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.05249","last_updated":"2025-01-09T14:01:15Z","snapshot_observed_at":"2026-08-13T17:50:26.804732Z","submitted_at":"2025-01-09T14:01:15Z","title":"RAG-WM: An Efficient Black-Box Watermarking Approach for Retrieval-Augmented Generation of Large Language Models","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-10T21:18:38.328637Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2501.05249"},"observation_digest":"sha256:ef27af1b073f5a23d54e93eabb44090245666d0755190f33f8d0ab25c6c2c249","observation_id":"6e0924ce-5a38-449b-b381-e8fec67474d0","resolution":{"observed_at":"2026-08-10T21:18:38.328637Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-10T17:59:56.251789Z","title":"arXiv preprint arXiv:2402.07867 (2024)","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.11759","last_updated":"2025-01-20T21:38:36Z","snapshot_observed_at":"2026-08-18T07:21:02.089220Z","submitted_at":"2025-01-20T21:38:36Z","title":"Poison-RAG: Adversarial Data Poisoning Attacks on Retrieval-Augmented Generation in Recommender Systems","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-10T17:59:56.251789Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2501.11759"},"observation_digest":"sha256:20f98e7e6df9e63cbb06e02dc4d01f245eb68f1170e157124d22975ab4fc63a5","observation_id":"c0311032-7160-4434-b041-f833f24feec4","resolution":{"observed_at":"2026-08-10T17:59:56.251789Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-09T23:48:54.096885Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.18365","last_updated":"2025-01-30T14:15:09Z","snapshot_observed_at":"2026-08-18T18:28:01.298025Z","submitted_at":"2025-01-30T14:15:09Z","title":"RbFT: Robust Fine-tuning for Retrieval-Augmented Generation against Retrieval Defects","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-09T23:48:54.096885Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2501.18365"},"observation_digest":"sha256:e640edefc9cc77c4efe6f4c9cf530d7ec19f4ef13271a0c737452cabf2331685","observation_id":"baf3476a-012d-4514-ad7c-204431ccaa9f","resolution":{"observed_at":"2026-08-09T23:48:54.096885Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-09T05:31:14.492097Z","title":"Poisonedrag: Knowledge poisoning attacks to retrieval-augmented generation of large language mod- els","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.03233","last_updated":"2025-02-05T14:49:12Z","snapshot_observed_at":"2026-08-14T11:16:27.239710Z","submitted_at":"2025-02-05T14:49:12Z","title":"Exploring the Security Threats of Knowledge Base Poisoning in Retrieval-Augmented Code Generation","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-09T05:31:14.492097Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2502.03233"},"observation_digest":"sha256:64b8e005fad30e4e21f5c222a9b8f96e3c3cf8091da0aaf3a59b3dc071bad266","observation_id":"c9607b22-6116-4922-8fa9-84e07cc7e43e","resolution":{"observed_at":"2026-08-09T05:31:14.492097Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-08T20:57:43.624290Z","title":"action\" key (containing the name of the tool to use) and an","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.04951","last_updated":"2025-06-13T04:49:36Z","snapshot_observed_at":"2026-08-13T12:06:29.001447Z","submitted_at":"2025-02-07T14:15:46Z","title":"Unsafe LLM-Based Search: Quantitative Analysis and Mitigation of Safety Risks in AI Web Search","version":3},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-08T20:57:43.624290Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2502.04951"},"observation_digest":"sha256:b6cca34fce6290756554005e12c1ea7eb46091ef7acbbe40a7f5114e3011bf54","observation_id":"c4987acd-3e48-4441-91f7-83a942ae0d80","resolution":{"observed_at":"2026-08-08T20:57:43.624290Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-08T20:06:58.396831Z","title":"Poisonedrag: Knowledge poisoning attacks to retrieval-augmented generation of large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.05174","last_updated":"2025-06-10T18:13:09Z","snapshot_observed_at":"2026-08-19T00:43:34.703842Z","submitted_at":"2025-02-07T18:57:49Z","title":"MELON: Provable Defense Against Indirect Prompt Injection Attacks in AI Agents","version":4},"reference_index":39,"source":"arxiv_source","source_observed_at":"2026-08-08T20:06:58.396831Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2502.05174"},"observation_digest":"sha256:941384a78824b161d0e6ef56d110930d507f4d01c3075a88f8b23b8e207c3445","observation_id":"27efaa9a-50aa-4e30-87aa-399eeb3fc73b","resolution":{"observed_at":"2026-08-08T20:06:58.396831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-09T00:50:00.452963Z","title":"Poisonedrag: Knowledge corruption attacks to retrieval-augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.05224","last_updated":"2025-02-06T04:43:05Z","snapshot_observed_at":"2026-08-13T00:35:04.918294Z","submitted_at":"2025-02-06T04:43:05Z","title":"A Survey on Backdoor Threats in Large Language Models (LLMs): Attacks, Defenses, and Evaluations","version":1},"reference_index":122,"source":"pdf_text","source_observed_at":"2026-08-09T00:50:00.452963Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2502.05224"},"observation_digest":"sha256:b7bd06b989ee7f1fa15018a32313b37ab239235575b6920e008705585ba7afb0","observation_id":"87ed32e5-a9b7-46c9-98ce-e5a0120a97fa","resolution":{"observed_at":"2026-08-09T00:50:00.452963Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-08T19:15:25.791670Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.06872","last_updated":"2025-02-08T06:50:47Z","snapshot_observed_at":"2026-08-16T08:10:55.902848Z","submitted_at":"2025-02-08T06:50:47Z","title":"Towards Trustworthy Retrieval Augmented Generation for Large Language Models: A Survey","version":1},"reference_index":247,"source":"pdf_text","source_observed_at":"2026-08-08T19:15:25.791670Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2502.06872"},"observation_digest":"sha256:b47b584ad6e598546992470d5ae1c8faf7e49ac671ae9999dba62ba871a8a0ae","observation_id":"8609c883-dc30-4836-bfb4-6a128e862741","resolution":{"observed_at":"2026-08-08T19:15:25.791670Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-08T10:11:13.404652Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.08178","last_updated":"2025-02-12T07:32:48Z","snapshot_observed_at":"2026-08-16T04:43:52.330158Z","submitted_at":"2025-02-12T07:32:48Z","title":"ParetoRAG: Leveraging Sentence-Context Attention for Robust and Efficient Retrieval-Augmented Generation","version":1},"reference_index":51,"source":"arxiv_source","source_observed_at":"2026-08-08T10:11:13.404652Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2502.08178"},"observation_digest":"sha256:313b70c8fd2009b6b4d775f113a853b346198536643b1e7493c36d47ea91f163","observation_id":"1ecb82a5-4cff-488a-a1f6-0533808dbdbf","resolution":{"observed_at":"2026-08-08T10:11:13.404652Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-08T04:37:28.867597Z","title":"Poisonedrag: Knowledge poisoning attacks to retrieval- augmented generation of large language models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2502.08586","last_updated":"2025-02-12T17:19:36Z","snapshot_observed_at":"2026-08-08T23:24:16.398221Z","submitted_at":"2025-02-12T17:19:36Z","title":"Commercial LLM Agents Are Already Vulnerable to Simple Yet Dangerous Attacks","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-08T04:37:28.867597Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2502.08586"},"observation_digest":"sha256:78f191e92dd7f3338ff9cae1a7685cbe7f5bb7149a1d2e38ce4b94861368f4b9","observation_id":"e82cbe66-f7fa-4f7e-89ff-287c47565931","resolution":{"observed_at":"2026-08-08T04:37:28.867597Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-16T12:19:16.802570Z","title":"Poisonedrag: Knowledge corruption attacks to retrieval-augmented generation of large language models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.13079","last_updated":"2025-08-12T17:53:18Z","snapshot_observed_at":"2026-08-18T12:49:03.887754Z","submitted_at":"2025-04-17T16:46:11Z","title":"Retrieval-Augmented Generation with Conflicting Evidence","version":2},"reference_index":52,"source":"arxiv_source","source_observed_at":"2026-08-16T12:19:16.802570Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2504.13079"},"observation_digest":"sha256:eef612005ba3b7f4b4bc0cbee80c6cb8e3a5bda282e8a4e887aa5bdd76721876","observation_id":"c28bd23f-fa59-4346-8281-407b14a69e37","resolution":{"observed_at":"2026-08-16T12:19:16.802570Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-16T11:40:41.764393Z","title":"Poisonedrag: Knowledge corruption attacks to retrieval-augmented generation of large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.14891","last_updated":"2025-04-21T06:39:47Z","snapshot_observed_at":"2026-08-18T02:53:14.734524Z","submitted_at":"2025-04-21T06:39:47Z","title":"Retrieval Augmented Generation Evaluation in the Era of Large Language Models: A Comprehensive Survey","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-16T11:40:41.764393Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2504.14891"},"observation_digest":"sha256:1a8c312640e0e02717c236167d1bb12be4e81a4698502e4df5659cee1cdcc318","observation_id":"01b79e01-c451-442b-931a-7c8e0cabfc80","resolution":{"observed_at":"2026-08-16T11:40:41.764393Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2504.19793","last_updated":"2025-08-24T03:28:21Z","snapshot_observed_at":"2026-08-14T15:35:38.720321Z","submitted_at":"2025-04-28T13:36:43Z","title":"Prompt Injection Attack to Tool Selection in LLM Agents","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-16T17:08:28.933831Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2504.19793"},"observation_digest":"sha256:303f64aaecf99adaa0304bc6a1e7451d0814be73ac76f7d4c28a871efe66e260","observation_id":"d8e7ef2a-26a8-4040-944c-9bdb642032b1","resolution":{"observed_at":"2026-05-16T17:08:28.970499Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-16T05:25:30.361882Z","title":"Poisonedrag: Knowledge corruption attacks to retrieval-augmented generation of large language models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.20769","last_updated":"2025-04-29T13:50:05Z","snapshot_observed_at":"2026-08-18T12:45:38.726080Z","submitted_at":"2025-04-29T13:50:05Z","title":"Chain-of-Defensive-Thought: Structured Reasoning Elicits Robustness in Large Language Models against Reference Corruption","version":1},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-16T05:25:30.361882Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2504.20769"},"observation_digest":"sha256:9b7f1a7a2800c82a40d0383923ebfb97f92b170609df58328000220be40ff831","observation_id":"915c5096-d3a4-47d5-ae34-b4928a7e3fd3","resolution":{"observed_at":"2026-08-16T05:25:30.361882Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-16T05:01:32.089713Z","title":"Poisonedrag: Knowledge poisoning at- tacks to retrieval-augmented generation of large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.21680","last_updated":"2025-04-30T14:18:11Z","snapshot_observed_at":"2026-08-18T12:32:51.958360Z","submitted_at":"2025-04-30T14:18:11Z","title":"Hoist with His Own Petard: Inducing Guardrails to Facilitate Denial-of-Service Attacks on Retrieval-Augmented Generation of LLMs","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-16T05:01:32.089713Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2504.21680"},"observation_digest":"sha256:a52b5d4776911872a2366fbd806882fdd14995866becbb78b6f7a27b91769c56","observation_id":"571fb5d4-1a82-495d-8528-4f62d9015c0d","resolution":{"observed_at":"2026-08-16T05:01:32.089713Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-15T23:12:44.422459Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.05196","last_updated":"2025-05-08T12:53:42Z","snapshot_observed_at":"2026-08-19T03:18:01.961139Z","submitted_at":"2025-05-08T12:53:42Z","title":"Stealthy LLM-Driven Data Poisoning Attacks Against Embedding-Based Retrieval-Augmented Recommender Systems","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T23:12:44.422459Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2505.05196"},"observation_digest":"sha256:df6ee67b02756db6ef0bc4e5444d06c6c9f6bff6474b5525c287c1d8c38c9284","observation_id":"b15c7f28-be0b-45ac-b0bb-499b8c0e8a2c","resolution":{"observed_at":"2026-08-15T23:12:44.422459Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-15T22:43:05.985747Z","title":"Poisonedrag: Knowledge corruption attacks to retrieval-augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.06579","last_updated":"2025-05-10T09:36:28Z","snapshot_observed_at":"2026-08-18T03:47:09.424279Z","submitted_at":"2025-05-10T09:36:28Z","title":"POISONCRAFT: Practical Poisoning of Retrieval-Augmented Generation for Large Language Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T22:43:05.985747Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2505.06579"},"observation_digest":"sha256:aaa51c0d085a9b4c0901936e83c43c7670ce186d3636b13906720b2b820a7d91","observation_id":"40b93cdc-ef77-45d0-a5d3-b962a1a3f327","resolution":{"observed_at":"2026-08-15T22:43:05.985747Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2505.11548","last_updated":"2026-04-09T01:58:59Z","snapshot_observed_at":"2026-08-15T19:45:08.666319Z","submitted_at":"2025-05-15T08:14:58Z","title":"One Shot Dominance: Knowledge Poisoning Attack on Retrieval-Augmented Generation Systems","version":4},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-22T15:19:08.867224Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2505.11548"},"observation_digest":"sha256:7db1c886ff3b67aca71ae3b895d65ce53c021e03f9dbc7f5b7ea6fa8fa2f2e27","observation_id":"7cb77f61-c462-4476-9136-0a36035ece07","resolution":{"observed_at":"2026-05-22T15:21:44.826695Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-15T20:34:34.286851Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12567","last_updated":"2025-05-18T22:55:16Z","snapshot_observed_at":"2026-08-18T18:57:05.261771Z","submitted_at":"2025-05-18T22:55:16Z","title":"A Survey of Attacks on Large Language Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T20:34:34.286851Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2505.12567"},"observation_digest":"sha256:8291d2690cd51107f5d306a16f69c6bc016b4a36ad50ceac0f96ab4d8b2a4377","observation_id":"6eae61db-a30a-4373-8ec5-4e8cff431d01","resolution":{"observed_at":"2026-08-15T20:34:34.286851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-15T20:34:34.405907Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.12655","last_updated":"2025-06-06T04:55:29Z","snapshot_observed_at":"2026-08-19T03:06:33.824503Z","submitted_at":"2025-05-19T03:14:08Z","title":"Web Intellectual Property at Risk: Preventing Unauthorized Real-Time Retrieval by Large Language Models","version":2},"reference_index":45,"source":"arxiv_source","source_observed_at":"2026-08-15T20:34:34.405907Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2505.12655"},"observation_digest":"sha256:eae11d95f6ed091eb8a81e964426c4190d9ddbcace5b8d13e3bba39cb7de9053","observation_id":"eb6d17ad-ae79-4242-b13d-9f30605cdb0d","resolution":{"observed_at":"2026-08-15T20:34:34.405907Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-07T15:41:04.546839Z","title":"Poisonedrag: Knowledge cor- ruption attacks to retrieval-augmented generation of large language models.arXiv preprint arXiv:2402.07867, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.14215","last_updated":"2026-07-08T13:57:53Z","snapshot_observed_at":"2026-08-13T12:38:13.732006Z","submitted_at":"2025-05-20T11:21:40Z","title":"Safety Degradation in AI Agents","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T15:41:04.546839Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2505.14215"},"observation_digest":"sha256:a686e41dec4dbbb3aa8e0faa5b55dd85b71c670be84da69a6dc08889a40e8193","observation_id":"70d25c1e-5534-4f15-9d09-1d0918f1999d","resolution":{"observed_at":"2026-08-07T15:41:04.546839Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-07T15:15:48.828674Z","title":"yes\" or","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.15753","last_updated":"2025-05-21T16:58:14Z","snapshot_observed_at":"2026-08-13T13:33:25.980248Z","submitted_at":"2025-05-21T16:58:14Z","title":"Scalable Defense against In-the-wild Jailbreaking Attacks with Safety Context Retrieval","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T15:15:48.828674Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2505.15753"},"observation_digest":"sha256:0a6f10966a4bfa230d8885683af5b89fd15c4c7866cbb9f04a3de4a28ae8be19","observation_id":"26e778b4-da45-4896-8dfd-0f438f6e2eee","resolution":{"observed_at":"2026-08-07T15:15:48.828674Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-07T15:14:45.122719Z","title":"Poisonedrag: Knowledge poisoning attacks to retrieval-augmented generation of large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16014","last_updated":"2026-06-02T10:15:17Z","snapshot_observed_at":"2026-08-18T08:42:33.143001Z","submitted_at":"2025-05-21T20:57:16Z","title":"Ranking Free RAG: Replacing Re-ranking with Selection in RAG for Sensitive Domains","version":5},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-07T15:14:45.122719Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2505.16014"},"observation_digest":"sha256:0c4d232963325e9c1629a977c4d04977909a1465c7a034b4bbc6e748ae149859","observation_id":"f1b3446c-fa44-43ca-8929-8b1581af798e","resolution":{"observed_at":"2026-08-07T15:14:45.122719Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-07T15:06:01.723487Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16367","last_updated":"2025-05-22T08:22:46Z","snapshot_observed_at":"2026-08-14T11:12:13.976611Z","submitted_at":"2025-05-22T08:22:46Z","title":"Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T15:06:01.723487Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2505.16367"},"observation_digest":"sha256:556f7d81da358b7dc788fb61cc430e363e03680fd8dd5cc03c771d4482a1347b","observation_id":"3429a0c7-ebfc-42f1-a537-070773e75f4b","resolution":{"observed_at":"2026-08-07T15:06:01.723487Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-07T14:36:35.536497Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.18583","last_updated":"2025-05-28T09:01:29Z","snapshot_observed_at":"2026-08-18T12:33:15.125850Z","submitted_at":"2025-05-24T08:19:25Z","title":"The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems","version":2},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-07T14:36:35.536497Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2505.18583"},"observation_digest":"sha256:04334ae06602790f41b23f850253075e070247cdb209db61f7768b133fbcae82","observation_id":"63b0bf57-701b-43b9-9cd2-c6965c5b5d85","resolution":{"observed_at":"2026-08-07T14:36:35.536497Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-07T13:25:07.369937Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.21870","last_updated":"2025-05-28T01:34:31Z","snapshot_observed_at":"2026-08-18T00:01:46.693992Z","submitted_at":"2025-05-28T01:34:31Z","title":"Evaluating the Retrieval Robustness of Large Language Models","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-07T13:25:07.369937Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2505.21870"},"observation_digest":"sha256:a25efdd0a40568c005bd83c3a82e33caeba52160c3a75941915eaafcf65ba201","observation_id":"d4e3c587-9f9b-4d6e-bff5-ea614be67383","resolution":{"observed_at":"2026-08-07T13:25:07.369937Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-07T13:21:40.020790Z","title":"Poisonedrag: Knowledge poisoning attacks to retrieval-augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-13T17:30:33.422266Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:40.020790Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:fe6e4b615eebaa3dfa4011a608f28a9f6631d0b02cbe666a787e57de16233a15","observation_id":"fbf74ff2-eacd-4e67-a4e0-ef15b2f5fb08","resolution":{"observed_at":"2026-08-07T13:21:40.020790Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2506.03535","last_updated":"2026-04-20T04:02:41Z","snapshot_observed_at":"2026-08-16T12:19:41.378144Z","submitted_at":"2025-06-04T03:31:00Z","title":"Across Programming Language Silos: A Study on Cross-Lingual Retrieval-augmented Code Generation","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-19T11:52:44.990234Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2506.03535"},"observation_digest":"sha256:ef4f6f5445761843d7331235a4841ac54f3f61e2d3f5f6b373a3b6eb0b05f527","observation_id":"da296a31-3aac-42c9-871e-9b8d6bd2d6ff","resolution":{"observed_at":"2026-05-19T11:53:03.497378Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-07T11:02:05.546108Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models.arXiv2024, arXiv:2402.07867","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.03683","last_updated":"2025-06-04T08:13:53Z","snapshot_observed_at":"2026-08-17T00:05:51.667507Z","submitted_at":"2025-06-04T08:13:53Z","title":"PRJ: Perception-Retrieval-Judgement for Generated Images","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T11:02:05.546108Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2506.03683"},"observation_digest":"sha256:f781f83e8f060a64de19b5edb01fa3ed5fc0ac75eccf838a53cdca461f8e3f55","observation_id":"613a9767-052a-4197-a428-1d31d0f2dc35","resolution":{"observed_at":"2026-08-07T11:02:05.546108Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2506.04390","last_updated":"2026-05-22T04:35:08Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-06-04T19:15:09Z","title":"Through the Stealth Lens: Attention-Aware Defenses Against Poisoning in RAG","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-25T08:10:31.473565Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2506.04390"},"observation_digest":"sha256:93d021815ec090144ae07464443c03bfcae6c0ef57fb194e8dab8f2cd20de757","observation_id":"6c8a045d-7ffa-4294-87f2-4edcf4373957","resolution":{"observed_at":"2026-05-25T08:15:34.142810Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-07T04:15:38.906102Z","title":"Poisonedrag: Knowledge corruption attacks to retrieval-augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.11415","last_updated":"2025-06-13T02:28:46Z","snapshot_observed_at":"2026-08-18T07:20:16.516871Z","submitted_at":"2025-06-13T02:28:46Z","title":"Bias Amplification in RAG: Poisoning Knowledge Retrieval to Steer LLMs","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T04:15:38.906102Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2506.11415"},"observation_digest":"sha256:9b1bd9186f8c4427a64a49719f0e210e4e6b088c55a199c6710d06b289069aa7","observation_id":"c8111ef8-2935-4542-afef-9c37f54c55f8","resolution":{"observed_at":"2026-08-07T04:15:38.906102Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-07T00:32:36.778570Z","title":"Poisonedrag: Knowledge cor- ruption attacks to retrieval-augmented generation of large language models.arXiv preprint arXiv:2402.07867, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.13666","last_updated":"2025-06-16T16:24:31Z","snapshot_observed_at":"2026-08-07T00:25:36.770856Z","submitted_at":"2025-06-16T16:24:31Z","title":"We Should Identify and Mitigate Third-Party Safety Risks in MCP-Powered Agent Systems","version":1},"reference_index":108,"source":"pdf_text","source_observed_at":"2026-08-07T00:32:36.778570Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2506.13666"},"observation_digest":"sha256:140988866f83de020d55585ce11c9975d3d83fd82d0a0a49945fc637519095fa","observation_id":"3e6a1912-492f-467e-a89c-202ac72dca6b","resolution":{"observed_at":"2026-08-07T00:32:36.778570Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-07T00:15:26.452348Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.14912","last_updated":"2025-06-17T18:44:21Z","snapshot_observed_at":"2026-08-08T23:47:54.808989Z","submitted_at":"2025-06-17T18:44:21Z","title":"CrEst: Credibility Estimation for Contexts in LLMs via Weak Supervision","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-07T00:15:26.452348Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2506.14912"},"observation_digest":"sha256:f86493945a071f56332d4083ff544798c2174ca9341c95a2787516564dab7ede","observation_id":"d6cda81d-3e8a-46fd-8dbd-f9cec06df78c","resolution":{"observed_at":"2026-08-07T00:15:26.452348Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-06T19:37:31.621811Z","title":"unavailable","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.05093","last_updated":"2025-07-07T15:13:54Z","snapshot_observed_at":"2026-08-18T16:28:06.851309Z","submitted_at":"2025-07-07T15:13:54Z","title":"The Hidden Threat in Plain Text: Attacking RAG Data Loaders","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T19:37:31.621811Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2507.05093"},"observation_digest":"sha256:38b93771d2e93f3882a5dcaf936138e61f5ef8d4802526d0bf04d08462abbfd5","observation_id":"5994bb5f-3587-4829-8733-12ba263c704b","resolution":{"observed_at":"2026-08-06T19:37:31.621811Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-06T19:01:14.484478Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.08862","last_updated":"2025-07-09T13:06:58Z","snapshot_observed_at":"2026-08-16T20:14:36.385136Z","submitted_at":"2025-07-09T13:06:58Z","title":"RAG Safety: Exploring Knowledge Poisoning Attacks to Retrieval-Augmented Generation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T19:01:14.484478Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2507.08862"},"observation_digest":"sha256:1258c24f9877c54951ffac607bed3286c14b34c6c0696f08317c51c0e038b302","observation_id":"3d9a0327-a6ad-4b9f-8a4f-e66d02300fdb","resolution":{"observed_at":"2026-08-06T19:01:14.484478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-06T14:42:08.223022Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.18202","last_updated":"2025-07-24T08:58:41Z","snapshot_observed_at":"2026-08-16T20:48:54.696470Z","submitted_at":"2025-07-24T08:58:41Z","title":"Safeguarding RAG Pipelines with GMTP: A Gradient-based Masked Token Probability Method for Poisoned Document Detection","version":1},"reference_index":49,"source":"arxiv_source","source_observed_at":"2026-08-06T14:42:08.223022Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2507.18202"},"observation_digest":"sha256:0b763b55b7d4123bb5c71c6ff83ecf32da1fb3b8a81a6a2cff91d69316dc753e","observation_id":"68edff08-d516-4b51-998d-c33ea54feda0","resolution":{"observed_at":"2026-08-06T14:42:08.223022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T22:51:28.198095Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.06418","last_updated":"2025-08-08T16:05:27Z","snapshot_observed_at":"2026-08-08T12:59:56.859606Z","submitted_at":"2025-08-08T16:05:27Z","title":"Quantifying Conversation Drift in MCP via Latent Polytope","version":1},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-05T22:51:28.198095Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2508.06418"},"observation_digest":"sha256:1c77895493303a8b7a68be1b2e54eba2c8219c11821cd256cbc3bb8d926c412f","observation_id":"104865e9-671a-4f27-a3c9-35bb198575ca","resolution":{"observed_at":"2026-08-05T22:51:28.198095Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T20:31:47.455320Z","title":"Poisonedrag: Knowledge cor- ruption attacks to retrieval-augmented generation of large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.10404","last_updated":"2025-08-14T07:12:44Z","snapshot_observed_at":"2026-08-18T11:11:26.991132Z","submitted_at":"2025-08-14T07:12:44Z","title":"Layer-Wise Perturbations via Sparse Autoencoders for Adversarial Text Generation","version":1},"reference_index":161,"source":"pdf_text","source_observed_at":"2026-08-05T20:31:47.455320Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2508.10404"},"observation_digest":"sha256:b719f34785b359706c342a4b48fa325a2da20211ed594cd3b7dccdac768ee8a5","observation_id":"db791a78-d474-447c-b765-2951a9e0f8be","resolution":{"observed_at":"2026-08-05T20:31:47.455320Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T18:48:53.146867Z","title":"Poisonedrag: Knowledge cor- ruption attacks to retrieval-augmented genera- tion of large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2508.15842","last_updated":"2025-08-19T18:20:38Z","snapshot_observed_at":"2026-08-16T00:01:49.230361Z","submitted_at":"2025-08-19T18:20:38Z","title":"Lexical Hints of Accuracy in LLM Reasoning Chains","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T18:48:53.146867Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2508.15842"},"observation_digest":"sha256:67393a38e38217a2061f84359f7d07a92dbcf3ca09c3ff84c85bb145ea1e359a","observation_id":"1a0c9a77-6560-4646-af5b-272626ed5d7a","resolution":{"observed_at":"2026-08-05T18:48:53.146867Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-04T21:34:00.816332Z","title":"Code Manual","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07941","last_updated":"2025-09-09T17:21:20Z","snapshot_observed_at":"2026-08-19T02:00:41.741397Z","submitted_at":"2025-09-09T17:21:20Z","title":"ImportSnare: Directed \"Code Manual\" Hijacking in Retrieval-Augmented Code Generation","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-04T21:34:00.816332Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2509.07941"},"observation_digest":"sha256:2befbc7bd3d5de7422e726552278eacd0ce9dc05550b808aa31cf67a5be21b44","observation_id":"f88b039d-eff5-474b-87e4-a7f89178a7c6","resolution":{"observed_at":"2026-08-04T21:34:00.816332Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2510.13842","last_updated":"2026-05-15T11:32:43Z","snapshot_observed_at":"2026-08-15T08:06:27.462797Z","submitted_at":"2025-10-11T14:50:40Z","title":"ADMIT: Few-shot Knowledge Poisoning Attacks on RAG-based Fact Checking","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-21T20:03:37.620559Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2510.13842"},"observation_digest":"sha256:60e80173481b9f355db1172b507d75fa6a7e0ddc30c1788ace4381b29ad737bb","observation_id":"0a0fe999-d014-48ed-828f-0fb6d4974e68","resolution":{"observed_at":"2026-05-21T20:04:20.244047Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2510.18333","last_updated":"2026-04-21T04:19:09Z","snapshot_observed_at":"2026-07-06T22:33:39.148066Z","submitted_at":"2025-10-21T06:34:51Z","title":"Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoption","version":2},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-05-18T05:24:25.622071Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2510.18333"},"observation_digest":"sha256:557bcf732de2c592e27ee723fc082507b91a6a1b9204fe1b54d55c82789e91cf","observation_id":"e6d9ca32-0456-469f-9b3f-c159b2774f34","resolution":{"observed_at":"2026-05-18T05:25:54.521932Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2510.23883","last_updated":"2026-04-03T16:27:34Z","snapshot_observed_at":"2026-08-13T20:52:15.127327Z","submitted_at":"2025-10-27T21:48:11Z","title":"Agentic AI Security: Threats, Defenses, Evaluation, and Open Challenges","version":3},"reference_index":117,"source":"pdf_text","source_observed_at":"2026-05-18T03:42:10.703369Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2510.23883"},"observation_digest":"sha256:9ea01ddb5cad0e14b9f3f1182eb29960f2e61fb62b3d71d84cfa1d3880a8b9db","observation_id":"4d007f45-fa61-4d2e-8318-4681601e2899","resolution":{"observed_at":"2026-05-18T03:42:22.361207Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-03T19:27:04.053807Z","title":"Poisonedrag: Knowledge corruption attacks to retrieval-augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2512.00804","last_updated":"2026-06-24T09:21:42Z","snapshot_observed_at":"2026-08-16T00:21:17.963405Z","submitted_at":"2025-11-30T09:27:18Z","title":"Epistemic Bias Injection: Manipulating LLM Opinion via Selective Context Retrieval","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-03T19:27:04.053807Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2512.00804"},"observation_digest":"sha256:d21bc04c35b64d3334c94ee10f9fd29386c04b491a1fc21af082522b89f7a086","observation_id":"8446b069-6eac-4c5f-a985-b53f8ef5e059","resolution":{"observed_at":"2026-08-03T19:27:04.053807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2604.04759","last_updated":"2026-04-06T15:27:05Z","snapshot_observed_at":"2026-08-11T04:23:46.286452Z","submitted_at":"2026-04-06T15:27:05Z","title":"Your Agent, Their Asset: A Real-World Safety Analysis of OpenClaw","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-10T19:20:52.845052Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2604.04759"},"observation_digest":"sha256:4d728dc5aef0c38d752d8aa473ff60aeff91dc505423898d4bd244f77158b5db","observation_id":"c0172594-d89a-4d57-8fd3-11adc1815b4f","resolution":{"observed_at":"2026-05-10T23:05:49.040793Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2604.07403","last_updated":"2026-04-08T10:33:54Z","snapshot_observed_at":"2026-08-18T00:50:00.197263Z","submitted_at":"2026-04-08T10:33:54Z","title":"RefineRAG: Word-Level Poisoning Attacks via Retriever-Guided Text Refinement","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-10T18:13:22.221234Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2604.07403"},"observation_digest":"sha256:04b401e8d1846a44e208d7f17234f7711a5391130c2809c28a2ba9c08c42936c","observation_id":"a5099c56-c40c-42b2-b2d2-c3a5d2ec096b","resolution":{"observed_at":"2026-05-11T05:16:04.908987Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2604.12201","last_updated":"2026-04-14T02:10:23Z","snapshot_observed_at":"2026-08-15T17:58:43.600611Z","submitted_at":"2026-04-14T02:10:23Z","title":"AdversarialCoT: Single-Document Retrieval Poisoning for LLM Reasoning","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-10T16:22:49.133595Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2604.12201"},"observation_digest":"sha256:53f05e6a5001d86a5aab9251b4159e570e8db028bd15127ce79d9d4cd9c90743","observation_id":"ba9b10a6-d152-4c5f-ab45-af4a4b2c6991","resolution":{"observed_at":"2026-05-11T08:56:03.767307Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2604.23338","last_updated":"2026-05-06T17:17:02Z","snapshot_observed_at":"2026-08-06T19:46:39.219000Z","submitted_at":"2026-04-25T14:57:15Z","title":"A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-08T07:53:13.746141Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2604.23338"},"observation_digest":"sha256:6a05a7c2f8a2d9ef77318ea10d1cea854a8785faeb5cb7a6734612dd45e514fc","observation_id":"872db6f1-9613-4506-b8e4-0444c3ec1990","resolution":{"observed_at":"2026-05-11T20:51:09.531127Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2605.08460","last_updated":"2026-05-08T20:27:23Z","snapshot_observed_at":"2026-08-18T18:38:53.632948Z","submitted_at":"2026-05-08T20:27:23Z","title":"When Child Inherits: Modeling and Exploiting Subagent Spawn in Multi-Agent Networks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-12T01:20:55.221345Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2605.08460"},"observation_digest":"sha256:164f203fcefa7275268ac60235766accdb20197a1b5ea1219ca9db200f2c8651","observation_id":"cc35d871-ca83-4dbc-9632-b3ac497a6ead","resolution":{"observed_at":"2026-05-12T08:01:33.103211Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2605.09822","last_updated":"2026-05-10T23:55:13Z","snapshot_observed_at":"2026-08-17T23:57:37.820842Z","submitted_at":"2026-05-10T23:55:13Z","title":"Oracle Poisoning: Corrupting Knowledge Graphs to Weaponise AI Agent Reasoning","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-12T02:27:06.805794Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2605.09822"},"observation_digest":"sha256:b8d1cd26e6c973eb16c40f09f4737d6bfcac1a925a4961c30705b315e8a6f256","observation_id":"5c7c5f58-6b48-4e5d-b575-e713f6e66076","resolution":{"observed_at":"2026-05-12T07:37:03.516192Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2605.12813","last_updated":"2026-05-31T17:51:51Z","snapshot_observed_at":"2026-07-06T23:24:27.821980Z","submitted_at":"2026-05-12T23:13:50Z","title":"REALISTA: Realistic Latent Adversarial Attacks that Elicit LLM Hallucinations","version":1},"reference_index":179,"source":"arxiv_source","source_observed_at":"2026-05-14T20:13:10.814899Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2605.12813"},"observation_digest":"sha256:370a580593392e2c35007ad7f1c4df6017bcc84f9a76431ef3f3daf28b05c4b7","observation_id":"e5ae8687-91ee-45b4-8f28-3f6b75a3ec47","resolution":{"observed_at":"2026-05-14T20:19:26.554033Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2605.13764","last_updated":"2026-05-13T16:44:20Z","snapshot_observed_at":"2026-08-02T13:52:50.385314Z","submitted_at":"2026-05-13T16:44:20Z","title":"VectorSmuggle: Steganographic Exfiltration in Embedding Stores and a Cryptographic Provenance Defense","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-14T17:45:53.847798Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2605.13764"},"observation_digest":"sha256:65fbb86e822300148e3b0893d9c56fe1dd5c8d342a1a8330ba5912351da20102","observation_id":"45ed2b15-873e-4dfb-9ce6-ecfbc07f8d83","resolution":{"observed_at":"2026-05-14T17:47:32.233883Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2605.14473","last_updated":"2026-07-19T02:26:21Z","snapshot_observed_at":"2026-08-02T14:06:25.310847Z","submitted_at":"2026-05-14T07:14:19Z","title":"Does RAG Know When Retrieval Is Wrong? Diagnosing Context Compliance under Knowledge Conflict","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-15T02:03:23.662430Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2605.14473"},"observation_digest":"sha256:d7a5eebdb63126fd40c83017fd9bd68621fd85d8c99b112ebe9f2b7518d6d11b","observation_id":"d7265b92-4d31-4e5e-b7af-50e8724504ef","resolution":{"observed_at":"2026-05-15T02:03:28.746771Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2605.14473","last_updated":"2026-07-19T02:26:21Z","snapshot_observed_at":"2026-08-02T14:06:25.310847Z","submitted_at":"2026-05-14T07:14:19Z","title":"Does RAG Know When Retrieval Is Wrong? Diagnosing Context Compliance under Knowledge Conflict","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-19T16:38:32.946287Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2605.14473"},"observation_digest":"sha256:7030efe55832fb9abc6b53529b478a2d29dbcc0240da9ab34e39ec8864f62696","observation_id":"38930f4c-36e1-4979-a90e-32f38d2c8fbe","resolution":{"observed_at":"2026-05-19T16:42:39.900319Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2605.16282","last_updated":"2026-04-11T04:25:19Z","snapshot_observed_at":"2026-08-12T21:07:09.004725Z","submitted_at":"2026-04-11T04:25:19Z","title":"Taxonomy and Consistency Analysis of Safety Benchmarks for AI Agents","version":1},"reference_index":71,"source":"arxiv_source","source_observed_at":"2026-05-21T01:42:55.693115Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2605.16282"},"observation_digest":"sha256:3b500d8d44ff4deea27ac4b39f60f144d5ba648434496d2c0f19fd402ce83497","observation_id":"287ada0c-ae60-400a-a549-643165fec13f","resolution":{"observed_at":"2026-05-21T01:43:56.674346Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2605.18133","last_updated":"2026-05-18T09:38:18Z","snapshot_observed_at":"2026-08-13T19:10:03.642585Z","submitted_at":"2026-05-18T09:38:18Z","title":"An Empirical Study of Privacy Leakage Chains via Prompt Injection in Black-Box Chatbot Environments","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-20T09:58:05.349147Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2605.18133"},"observation_digest":"sha256:65feef5305114fd34f7e54b2bdd904d06748ca687af79846713730996b6133df","observation_id":"9e07f974-dc47-4ebf-9248-a12082270142","resolution":{"observed_at":"2026-05-20T09:58:10.849558Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2605.27157","last_updated":"2026-05-26T15:18:43Z","snapshot_observed_at":"2026-08-13T04:37:01.820630Z","submitted_at":"2026-05-26T15:18:43Z","title":"Detecting Is Not Resolving: The Monitoring Control Gap in Retrieval Augmented LLMs","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-06-29T17:06:46.379906Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2605.27157"},"observation_digest":"sha256:7663e62c84b5d4c02a808938964fc2f8b39a60f2a4d21475e217f2b80a92e381","observation_id":"66f274a4-c16b-4c99-87fd-6af7e1c49e35","resolution":{"observed_at":"2026-06-29T17:13:44.829559Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2606.00914","last_updated":"2026-05-30T22:43:23Z","snapshot_observed_at":"2026-08-13T04:59:05.373043Z","submitted_at":"2026-05-30T22:43:23Z","title":"Adversarial Feeds Steer LLM Agent Decisions Against Their Defaults","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-06-28T18:18:52.472535Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2606.00914"},"observation_digest":"sha256:20b688f74da2fc6d55938a75f9dbf5ca49da50db6a44cbd3f0eacb2c886c1a43","observation_id":"46fa93b4-522d-4d55-821f-8105162fdbdd","resolution":{"observed_at":"2026-06-28T20:52:38.003084Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2606.01212","last_updated":"2026-06-03T04:47:29Z","snapshot_observed_at":"2026-08-12T16:54:44.420151Z","submitted_at":"2026-05-31T13:03:47Z","title":"DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-06-28T17:43:41.256808Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2606.01212"},"observation_digest":"sha256:24f9c4ee46e5d93bc01342de914586a522c5daf58274c8d1eb02aa6828a8bbfd","observation_id":"45c9ff80-9322-49db-b96a-947086b15ac3","resolution":{"observed_at":"2026-07-01T20:46:13.945971Z","resolver_source":"arxiv_id","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2606.02643","last_updated":"2026-05-31T15:11:59Z","snapshot_observed_at":"2026-08-12T16:02:23.609236Z","submitted_at":"2026-05-31T15:11:59Z","title":"Inference Cost Attacks for Retrieval-Augmented Large Language Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-06-28T16:55:50.702951Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2606.02643"},"observation_digest":"sha256:9c76a2c24b3a633d210be45c2af36eeb65870cd8c26549f643bb8f562491be38","observation_id":"89906a3a-5bb4-4419-8479-98f97d714282","resolution":{"observed_at":"2026-06-28T17:02:23.695671Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2606.04109","last_updated":"2026-06-08T04:40:12Z","snapshot_observed_at":"2026-08-15T03:21:14.720187Z","submitted_at":"2026-06-02T18:12:57Z","title":"Discourse-Role Labels as Presentation-Time Variables for Context Use in Language Models","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-28T10:13:48.860754Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2606.04109"},"observation_digest":"sha256:0872743135306103e0955c2716a8d0d37b018b36207cd6d395c488d1f9420090","observation_id":"37192de0-f434-44cf-b19a-6dd213da2a6b","resolution":{"observed_at":"2026-07-02T03:16:33.694948Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2606.10322","last_updated":"2026-06-09T02:18:44Z","snapshot_observed_at":"2026-08-16T19:11:15.244542Z","submitted_at":"2026-06-09T02:18:44Z","title":"Game-Theoretic Multi-Agent Control for Robust Contextual Reasoning in LLMs","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-27T13:05:57.618969Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2606.10322"},"observation_digest":"sha256:4757a7ec26ade890a90560f0acc894eda24de1d5b4dc4ee42e17682b646a4e6b","observation_id":"2ff323c7-24cd-455f-a83e-62ff87bbc5a2","resolution":{"observed_at":"2026-07-03T05:47:41.232114Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2606.12290","last_updated":"2026-06-10T16:26:46Z","snapshot_observed_at":"2026-08-14T01:08:37.058783Z","submitted_at":"2026-06-10T16:26:46Z","title":"Selection Integrity for LLM Graph Memory: An Accumulability Criterion for Information-Flow-Blind Retrieval","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-27T09:13:58.485088Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2606.12290"},"observation_digest":"sha256:c0ed64a2ed4fdd60575dae61f1df3c2011b44f727ed1c3a3d0e6f66f780915f7","observation_id":"4487f155-8f59-4119-a4ba-e9525daccaa3","resolution":{"observed_at":"2026-07-03T11:58:06.301450Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2606.18356","last_updated":"2026-06-16T18:04:45Z","snapshot_observed_at":"2026-08-15T23:12:53.362317Z","submitted_at":"2026-06-16T18:04:45Z","title":"SafeClawBench: Separating Semantic, Audit-Evidence, and Sandbox Harm in Tool-Using LLM Agents","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-06-26T23:40:53.439549Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2606.18356"},"observation_digest":"sha256:6243c82cbb9816b7ac39e74e05112e8acc60cf183ae3b0cae39e7d4a6d97b814","observation_id":"453d6083-7bfc-4e6a-9955-d2f3a298ec65","resolution":{"observed_at":"2026-07-03T22:18:59.754139Z","resolver_source":"arxiv_id","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2606.21377","last_updated":"2026-06-19T12:35:00Z","snapshot_observed_at":"2026-08-13T05:25:59.273350Z","submitted_at":"2026-06-19T12:35:00Z","title":"ARENA: An Architecture for Measuring the Transferability of Autonomous Cyber Defense","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-06-26T14:00:04.412804Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2606.21377"},"observation_digest":"sha256:140ede092908d4ee5c32535384987388f01c94fcadee9649f473fa3415f82a4b","observation_id":"5afa86ac-e448-4b11-b5aa-400ec67eb303","resolution":{"observed_at":"2026-07-04T06:59:37.745250Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2606.22560","last_updated":"2026-06-21T15:36:04Z","snapshot_observed_at":"2026-08-17T16:12:41.919259Z","submitted_at":"2026-06-21T15:36:04Z","title":"Evidence-Bound Gateway-Path Provenance for Third-Party LLM Inference","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-06-26T10:07:23.015655Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2606.22560"},"observation_digest":"sha256:347ed07f4c91413bfe1e8471391d0c90d4578433e7489029819fe7a77009db9f","observation_id":"b0d4382c-c9bb-41d4-a1bf-4416dc997355","resolution":{"observed_at":"2026-07-04T09:19:44.154540Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2606.24322","last_updated":"2026-06-23T08:57:50Z","snapshot_observed_at":"2026-08-11T06:27:13.828770Z","submitted_at":"2026-06-23T08:57:50Z","title":"Securing LLM-Agent Long-Term Memory Against Poisoning: Non-Malleable, Origin-Bound Authority with Machine-Checked Guarantees","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-25T23:40:36.181525Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2606.24322"},"observation_digest":"sha256:256d72a807b557dd663eb7d5d6269e35681f18128cb92bc66b6ba11411a38806","observation_id":"69d17ae0-f5fd-443a-ac00-345c2f54c9ba","resolution":{"observed_at":"2026-07-04T17:30:00.240682Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2606.27736","last_updated":"2026-06-26T05:35:27Z","snapshot_observed_at":"2026-08-15T15:21:11.294199Z","submitted_at":"2026-06-26T05:35:27Z","title":"ToE: A Hierarchical and Explainable Claim Verification Framework with Dynamic Multi-source Evidence Retrieval and Aggregation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-29T05:03:26.118083Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2606.27736"},"observation_digest":"sha256:ac3b39f17f94e881ee5e9bd277b8fbaf87658d030bd42b57ce452d3acb7e5cc4","observation_id":"a1ac8142-e97a-44a1-8f5b-ea1b6601fa40","resolution":{"observed_at":"2026-06-29T18:43:51.201286Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2606.31639","last_updated":"2026-06-30T13:21:43Z","snapshot_observed_at":"2026-08-13T03:20:31.232060Z","submitted_at":"2026-06-30T13:21:43Z","title":"A Lifecycle and Application-Stack Survey of Large Language Model Vulnerabilities: Attacks, Risks, Defenses, and Open Problems","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-07-01T04:44:23.543728Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2606.31639"},"observation_digest":"sha256:cd9fa3f915a8b5742c7fe3a7d4bb8409c4fb891501d39fd8ad64a897d20d7b46","observation_id":"8f5984e1-77ec-42ae-876e-74232566ef7f","resolution":{"observed_at":"2026-07-01T11:05:42.295805Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2606.32002","last_updated":"2026-06-30T17:35:14Z","snapshot_observed_at":"2026-08-15T03:04:10.151243Z","submitted_at":"2026-06-30T17:35:14Z","title":"Self-Study Reconsidered: The Hidden Fragility of Learning from Self-Generated QA","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-07-01T05:07:58.441326Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2606.32002"},"observation_digest":"sha256:ae90bb45673d949b9326ecdbcb66df6e2853e552f5bc717f3e852fe2c4a9b77e","observation_id":"ccb137ec-5bdf-4865-a728-3a2b5fe49bbc","resolution":{"observed_at":"2026-07-01T10:45:42.842605Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":"2402.07867","doi":"10.48550/arxiv.2402.07867","metadata_source":"arxiv_reference","pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Poisonedrag: Knowledge poi- soning attacks to retrieval-augmented generation of large language models","venue":"arXiv (Cornell University)","work_id":"66bdf5c5-8305-49a1-b957-9bb5993a358e","year":2024},"citing_paper":{"arxiv_id":"2607.00012","last_updated":"2026-05-08T10:35:13Z","snapshot_observed_at":"2026-08-12T10:34:28.270771Z","submitted_at":"2026-05-08T10:35:13Z","title":"PRA-RAG: Provably Robust Aggregation in Retrieval-Augmented Generation against Retrieval Corruption","version":1},"reference_index":136,"source":"arxiv_source","source_observed_at":"2026-07-02T23:42:23.695930Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2607.00012"},"observation_digest":"sha256:0e1ae8df086a8c737348a73e1f98e002aedd6444ad40f6a62b46f733678fd0b8","observation_id":"3ee26914-5863-4dd5-be2d-2aa90f5427c4","resolution":{"observed_at":"2026-07-02T23:47:27.220715Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-02T07:06:19.177718Z","title":"PoisonedRAG: Knowledge cor- ruption attacks to retrieval-augmented generation of large language models, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.13078","last_updated":"2026-07-12T22:34:02Z","snapshot_observed_at":"2026-08-09T02:07:52.896888Z","submitted_at":"2026-07-12T22:34:02Z","title":"Operational Evidence Gaps for LLMs in Fraud Detection and Trust-and-Safety Workflows","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-02T07:06:19.177718Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2607.13078"},"observation_digest":"sha256:74184209f14e6541de610414de14c5e6a46620445360f4955d307bd0dc45d008","observation_id":"ee90f312-5107-411e-a5a3-e2e13e65d86b","resolution":{"observed_at":"2026-08-02T07:06:19.177718Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-02T05:55:34.871634Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14157","last_updated":"2026-07-14T20:05:20Z","snapshot_observed_at":"2026-08-19T08:32:53.461496Z","submitted_at":"2026-07-14T20:05:20Z","title":"Certified Domain Consistency for Multi-Domain Retrieval: Label-Free Per-Domain Contamination Control with Conformal Risk Guarantees","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-02T05:55:34.871634Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2607.14157"},"observation_digest":"sha256:a1471e5472fdefcc0e0e7c333c68a8a6967165203291cfd756a267d028515bf8","observation_id":"32a749b5-8c39-4202-9b3d-8631a058f76d","resolution":{"observed_at":"2026-08-02T05:55:34.871634Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-01T09:35:38.121521Z","title":"Poisonedrag: Knowledge corruption attacks to retrieval-augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.20730","last_updated":"2026-07-22T21:04:51Z","snapshot_observed_at":"2026-08-18T12:48:29.880235Z","submitted_at":"2026-07-22T21:04:51Z","title":"GPE: Evaluating Robust Evidence Aggregation for Fact Verification under Controllable GEO-Style Poisoning","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T09:35:38.121521Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2607.20730"},"observation_digest":"sha256:cf40bb9722a103ce51c8bc26abda8af509e08f8170989df5d3d0ef769dc24b76","observation_id":"e6e5ca80-4ad2-4309-9b65-ca2a9cffba0e","resolution":{"observed_at":"2026-08-01T09:35:38.121521Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-07-30T10:56:48.053139Z","title":"PoisonedRAG: Knowledge corrup- tion attacks to retrieval-augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.23838","last_updated":"2026-07-26T20:52:23Z","snapshot_observed_at":"2026-08-12T14:47:34.746507Z","submitted_at":"2026-07-26T20:52:23Z","title":"TriShieldRAG: A Three-Ring Defense-in-Depth Framework Against Knowledge Corruption in Retrieval-Augmented Generation","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-30T10:56:48.053139Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2607.23838"},"observation_digest":"sha256:4a5a1f6115ddfec4ed24764705aa8b315a3c5bf2554ec70db5dc35cc472bdacd","observation_id":"1034e036-5d35-4e13-90d1-5b38feac677c","resolution":{"observed_at":"2026-07-30T10:56:48.053139Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-07T00:12:27.078558Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.01558","last_updated":"2026-08-03T00:28:49Z","snapshot_observed_at":"2026-08-14T09:34:20.006143Z","submitted_at":"2026-08-03T00:28:49Z","title":"Securing Agentic AI: From Per-Action Checks to Trajectory Assurance","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T00:12:27.078558Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2608.01558"},"observation_digest":"sha256:ad68f7e272e8f8abcdc28b3a3a3198af3ff42f72df9ee4eb09eff4cfce1545ff","observation_id":"b762fbc8-2f22-4c04-afaf-36ca9dbed0c2","resolution":{"observed_at":"2026-08-07T00:12:27.078558Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-04T23:14:59.401573Z","title":"2402.07867 , archivePrefix =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.01676","last_updated":"2026-08-03T04:12:02Z","snapshot_observed_at":"2026-08-19T04:31:35.206619Z","submitted_at":"2026-08-03T04:12:02Z","title":"Understanding Sparse Attention Selectivity in Long-Context Foundation Models via Counterfactual Evaluation","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-04T23:14:59.401573Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2608.01676"},"observation_digest":"sha256:1ef55bc587b1bf55b967fabfdee33f37bcc49ba8d19cc3c46b6b455f49268e29","observation_id":"02de363d-cea2-47f3-8fb4-68505a5bb3e8","resolution":{"observed_at":"2026-08-04T23:14:59.401573Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-08T18:59:12.538220Z","title":"Poisonedrag: Knowledge corruption attacks to retrieval-augmented generation of large language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04366","last_updated":"2026-08-05T02:13:37Z","snapshot_observed_at":"2026-08-17T15:37:25.419956Z","submitted_at":"2026-08-05T02:13:37Z","title":"Combating Knowledge Corruption in Agent Systems: A Byzantine-Tolerant Secure Collaborative RAG Framework","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-08T18:59:12.538220Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2608.04366"},"observation_digest":"sha256:2a284b9729d6f61fc65db0fbee877ed9626f50975db5eeb9ed61d6151e5791bf","observation_id":"3c4cb171-c8d0-46ff-a2e8-23461687a134","resolution":{"observed_at":"2026-08-08T18:59:12.538220Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.07867","snapshot_observed_at":"2026-08-12T00:47:18.135511Z","title":"PoisonedRAG : Knowledge corruption attacks to retrieval-augmented generation of large language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.07952","last_updated":"2026-08-08T06:31:00Z","snapshot_observed_at":"2026-08-19T00:28:21.247907Z","submitted_at":"2026-08-08T06:31:00Z","title":"Persistent Semantic Entities in Tool-Augmented LLM Systems","version":1},"reference_index":37,"source":"arxiv_source","source_observed_at":"2026-08-12T00:47:18.135511Z"},"links":{"cited_paper":"/paper/2402.07867","citing_paper":"/paper/2608.07952"},"observation_digest":"sha256:6cedf1f96933008f95d5fc390aeb00fd13d202c0c1c47cabac86cb93d2df7dca","observation_id":"8a1d15d4-8840-46d8-9878-f032fcf9c810","resolution":{"observed_at":"2026-08-12T00:47:18.135511Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2402.07867/citation-record","integrity":"/paper/2402.07867/integrity","json":"/paper/2402.07867/citation-record.json","paper":"/paper/2402.07867"},"outbound":[],"paper":{"arxiv_id":"2402.07867","last_updated":"2024-08-13T01:55:06Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-18T12:32:21.937066Z","submitted_at":"2024-02-12T18:28:36Z","title":"PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 86 inbound Pith citation observations for arXiv:2402.07867."}