Hangyi Zhao

Logic Hijacking of RAG: Single-Document Poisoning via Local Optimization

According to the abstract, Zhao and colleagues propose MONOLOGUE, a way to poison one document in a retrieval-augmented system by conceding the true fact and then presenting a false update, refined offline. They report it beats other attacks across three benchmarks, three retrieval backends and four open-weight models.