RAG Poisoning: Manipulated Documents Poison the Company Knowledge Base
Factos validados
Companies use Retrieval Augmented Generation (RAG) so AIs can access internal manuals and intranets. Attackers inject manipulated text snippets that falsify internal search results.
Explicação simples
The manipulated page in the library: Someone pastes a forged page into the encyclopedia. When the librarian looks it up, they read the lie as truth.
Relevância de segurança e dica prática
Search indexes and RAG data sources must undergo strict integrity checks.
Fonte primária / referência
- OWASP LLM04: Data and Model Poisoning