Paper Citation Record · LEDGER

HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models

As of 10 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 12 inbound Pith citation observations for arXiv:2410.22832.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2410.22832 v1

Coverage vector

measured 0 of 0 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links

measured 12 of 12 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-10T06:31:04.303077+00:00

measured 12 of 12 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-09T05:31:14.470981Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: arxiv_reference, observed 2026-07-01T20:46:13.936668Z

Reference resolution

0 of 0 outbound references displayed

verified exact0
verified fuzzy0
unresolved0
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

No outbound reference observations are available for this paper version.

Pith citing papers

Observation e9f0dacf-bd42-4881-a893-88d8d080b5c1 · inbound

Exploring the Security Threats of Knowledge Base Poisoning in Retrieval-Augmented Code Generation cites this paper.

Exploring the Security Threats of Knowledge Base Poisoning in Retrieval-Augmented Code Generation HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models

Reference 85

Resolution: unresolved; no resolver link, observed 2026-08-09T05:31:14.470981Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 99ed25c8-3d2c-4367-ac4a-cbd6b162c64b · inbound

One Shot Dominance: Knowledge Poisoning Attack on Retrieval-Augmented Generation Systems cites this paper.

One Shot Dominance: Knowledge Poisoning Attack on Retrieval-Augmented Generation Systems HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models

Reference 8

Resolution: verified exact; arxiv_id, observed 2026-05-22T15:21:44.821076Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 72a4c8a2-d4b4-43e3-8418-316624126672 · inbound

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems cites this paper.

Chain-of-Thought Poisoning Attacks against R1-based Retrieval-Augmented Generation Systems HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-07T15:06:01.505577Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 762e2534-1435-43ae-8809-1f94fcf01c5a · inbound

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation cites this paper.

Benchmarking Poisoning Attacks against Retrieval-Augmented Generation HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models

Reference 90

Resolution: unresolved; no resolver link, observed 2026-08-07T14:33:00.474010Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f4f147ee-0ad1-4b5d-a07d-5de93edcfcc2 · inbound

The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems cites this paper.

The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models

Reference 46

Resolution: unresolved; no resolver link, observed 2026-08-07T14:36:35.388751Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d40f98a0-a812-47e0-bbe5-9acf560065e1 · inbound

Quantifying Conversation Drift in MCP via Latent Polytope cites this paper.

Quantifying Conversation Drift in MCP via Latent Polytope HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-05T22:51:28.181829Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 87f7df2a-d8fa-490f-a266-324501ec82be · inbound

Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain cites this paper.

Evaluating the Robustness of Retrieval-Augmented Generation to Adversarial Evidence in the Health Domain HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models

Reference 86

Resolution: unresolved; no resolver link, observed 2026-08-05T10:44:10.643154Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a04274e4-9433-4826-aba4-51a7f5a1e2c2 · inbound

AdversarialCoT: Single-Document Retrieval Poisoning for LLM Reasoning cites this paper.

AdversarialCoT: Single-Document Retrieval Poisoning for LLM Reasoning HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models

Reference 40

Resolution: verified exact; arxiv_id, observed 2026-05-11T08:56:03.810680Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 1954d179-8bf4-4706-b5b4-c05d429b1548 · inbound

A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework cites this paper.

A Systematic Survey of Security Threats and Defenses in LLM-Based AI Agents: A Layered Attack Surface Framework HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models

Reference 49

Resolution: metadata mismatch; arxiv_id, observed 2026-05-11T20:51:09.583171Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 9a34d813-723e-4bb7-b3ef-dc30369ebb1a · inbound

DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation cites this paper.

DiscourseFlip: An Oblique Discourse-Level Opinion Manipulation Attack against Black-box Retrieval-Augmented Generation HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models

Reference 46

Resolution: metadata mismatch; arxiv_id, observed 2026-07-01T20:46:13.938537Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation b8461c94-543f-4e52-a0c1-fbff92a17505 · inbound

Agent-Native Immune System: Architecture, Taxonomy, and Engineering cites this paper.

Agent-Native Immune System: Architecture, Taxonomy, and Engineering HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models

Reference 23

Resolution: metadata mismatch; arxiv_id, observed 2026-07-01T17:25:50.833782Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.

Observation 5e5a0573-e736-4851-be8f-dcf51e483028 · inbound

PURPOSE: Poisoning Conflict Resolution in RAG via Proxy-Fact-Grounded Updates cites this paper.

PURPOSE: Poisoning Conflict Resolution in RAG via Proxy-Fact-Grounded Updates HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-06T17:25:42.722923Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.