RAG Poisoning: Manipulated Documents Poison the Company Knowledge Base
Validated facts
Companies use Retrieval Augmented Generation (RAG) so AIs can access internal manuals and intranets. Attackers inject manipulated text snippets that falsify internal search results.
In plain language
The manipulated page in the library: Someone pastes a forged page into the encyclopedia. When the librarian looks it up, they read the lie as truth.
Security relevance & practical tip
Search indexes and RAG data sources must undergo strict integrity checks.
Primary source / reference
- OWASP LLM04: Data and Model Poisoning