RAG 檢索結果注入攻擊

Risk Description

Attackers inject malicious documents containing hidden prompt injection instructions into RAG systems knowledge bases or retrievable external sources. When user queries trigger retrieval of these malicious documents, injected instructions are processed as knowledge sources and influence model output. This is particularly dangerous as RAG systems have higher trust in retrieval results, and attackers can poison remotely without direct access to the target system.