RAG Poisoning: Manipulated Documents Poison the Company Knowledge Base
Hechos validados
Companies use Retrieval Augmented Generation (RAG) so AIs can access internal manuals and intranets. Attackers inject manipulated text snippets that falsify internal search results.
Explicación sencilla
The manipulated page in the library: Someone pastes a forged page into the encyclopedia. When the librarian looks it up, they read the lie as truth.
Relevancia de seguridad y consejo práctico
Search indexes and RAG data sources must undergo strict integrity checks.
Fuente primaria / referencia
- OWASP LLM04: Data and Model Poisoning