Tracing Target Answers in Poisoned Retrieval Corpora via Token Influence Attribution
arXiv:2606.25721v1 Announce Type: cross Abstract: Retrieval-Augmented Generation (RAG) systems are vulnerable to corpus poisoning attacks that manipulate model outputs through malicious retrieved docu