What Is RAG Poisoning?

An attack where a malicious document is inserted into a retrieval-augmented generation (RAG) vector store. When the poisoned document is retrieved, it injects hidden instructions into the model's context on every future query that triggers it.