The BaseResearcharXiv
Logic Hijacking of RAG: Single-Document Poisoning via Local Optimization
According to the abstract, Zhao and colleagues propose MONOLOGUE, a way to poison one document in a retrieval-augmented system by conceding the true fact and then presenting a false update, refined offline. They report it beats other attacks across three benchmarks, three retrieval backends and four open-weight models.
Why it matters
The same thing, for different readers.
For researchers
Zhao and colleagues suggest guardrails that look for explicit refutations or instruction overrides may miss poisoned documents framed as a dated record correction.
How the finding was reached
In our words, from the source. Weigh the finding by how it was made.
- What was done
- A single-document poisoning method tested on three benchmarks, three retrieval backends and four open-weight generator setups.
- What it found
- The authors report the strongest overall attack efficacy among compared methods; the excerpt does not give numbers.
- What it does not show
- Only the abstract excerpt was read; results are from open-weight models.
- Status
- A preprint: not yet peer reviewed
The record
- Questions
- Are AI companies putting stronger safeguards into practice?
- People
- Hangyi Zhao (Wrote it) · Bonan Zhang (Wrote it) · Fusen Guo (Wrote it)
- What we read
- We have read only the description the publisher gives. No quotations until someone reads the source itself.
- Found by
- The Radar, run of October 27, 2026, via
arxiv-ai-safety-query(tier 1: the source’s own channel or an official record) - Cite this
- arXiv, “Logic Hijacking of RAG: Single-Document Poisoning via Local Optimization”, October 26, 2026. Entry in the Ctrl AI Base, https://ctrlai.com/base/arxiv-2026-10-26-logic-hijacking-rag-poisoning
Our notesLight lane: excerpt only; cut off before the numbers.