{"id":"https://openalex.org/W7204453404","doi":"https://doi.org/10.18653/2026.findings-emnlp.1269","title":"Retrieved But Not Reliable: A Survey on Attacks, and Defenses in Retrieval-Augmented Generation","display_name":"Retrieved But Not Reliable: A Survey on Attacks, and Defenses in Retrieval-Augmented Generation","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7204453404","doi":"https://doi.org/10.18653/2026.findings-emnlp.1269"},"language":"en","primary_location":{"id":"doi:10.18653/2026.findings-emnlp.1269","doi":"https://doi.org/10.18653/2026.findings-emnlp.1269","is_oa":true,"landing_page_url":"https://doi.org/10.18653/2026.findings-emnlp.1269","pdf_url":"https://aclanthology.org/2026.findings-emnlp.1269.pdf","source":{"id":"https://openalex.org/S7407096085","display_name":"Findings of the Association for Computational Linguistics: EMNLP (Findings of EMNLP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310320244","host_organization_name":"Association for Computational Linguistics","host_organization_lineage":["https://openalex.org/P4310320244"],"host_organization_lineage_names":["Association for Computational Linguistics"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: EMNLP 2026","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://aclanthology.org/2026.findings-emnlp.1269.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5130389281","display_name":"Minh Tran","orcid":"https://orcid.org/0009-0008-7935-6881","observed_orcids":["https://orcid.org/0009-0008-7935-6881"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tran Ta Quang Minh","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5095057026","display_name":"Cuong Dang","orcid":"https://orcid.org/0009-0009-7463-0148","observed_orcids":["https://orcid.org/0009-0009-7463-0148"]},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Cuong Dang","raw_affiliation_strings":["Virginia Tech ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Virginia Tech ,","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5148453010","display_name":"Tuc Nguyen","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I592451","display_name":"Indiana University","ror":"https://ror.org/01kg8sb98","country_code":"US","type":"education","lineage":["https://openalex.org/I592451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tuc Nguyen","raw_affiliation_strings":["Indiana University ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Indiana University ,","institution_ids":["https://openalex.org/I592451"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113030784","display_name":"Khanh-Tung Tran","orcid":"https://orcid.org/0000-0001-6796-8911","observed_orcids":["https://orcid.org/0000-0001-6796-8911"]},"institutions":[{"id":"https://openalex.org/I27577105","display_name":"University College Cork","ror":"https://ror.org/03265fv13","country_code":"IE","type":"education","lineage":["https://openalex.org/I27577105"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Khanh-Tung Tran","raw_affiliation_strings":["University College Cork ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University College Cork ,","institution_ids":["https://openalex.org/I27577105"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063682352","display_name":"Minh Huynh Nguyen","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Minh Huynh Nguyen","raw_affiliation_strings":["National University of Singapore ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National University of Singapore ,","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130326928","display_name":"Trinh Chau","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chau Nguyen To Trinh","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125746284","display_name":"Kien Le","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kien Le","raw_affiliation_strings":["Independent Researcher ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Independent Researcher ,","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5107179049","display_name":"Do Xuan Long","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Do Xuan Long","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5144376616","display_name":"Jiahao Zhang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jiahao Zhang","raw_affiliation_strings":["The Pennsylvania State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5148498302","display_name":"Fali Wang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fali Wang","raw_affiliation_strings":["The Pennsylvania State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101843337","display_name":"Hoang D. Nguyen","orcid":"https://orcid.org/0000-0003-2541-3269","observed_orcids":["https://orcid.org/0000-0003-2541-3269"]},"institutions":[{"id":"https://openalex.org/I27577105","display_name":"University College Cork","ror":"https://ror.org/03265fv13","country_code":"IE","type":"education","lineage":["https://openalex.org/I27577105"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Hoang D. Nguyen","raw_affiliation_strings":["University College Cork ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University College Cork ,","institution_ids":["https://openalex.org/I27577105"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5148506928","display_name":"Thanh Le","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I123565023","display_name":"Vietnam National University Ho Chi Minh City","ror":"https://ror.org/00waaqh38","country_code":"VN","type":"education","lineage":["https://openalex.org/I123565023"]},{"id":"https://openalex.org/I23582244","display_name":"Ho Chi Minh City University of Science","ror":"https://ror.org/05jfbgm49","country_code":"VN","type":"education","lineage":["https://openalex.org/I123565023","https://openalex.org/I23582244"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Thanh Le","raw_affiliation_strings":["Faculty of Information Technology , University of Science , Ho Chi Minh City , Vietnam","Vietnam National University , Ho Chi Minh City , Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Information Technology , University of Science , Ho Chi Minh City , Vietnam","institution_ids":["https://openalex.org/I23582244"]},{"raw_affiliation_string":"Vietnam National University , Ho Chi Minh City , Vietnam","institution_ids":["https://openalex.org/I123565023"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5148500127","display_name":"Suhang Wang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Suhang Wang","raw_affiliation_strings":["The Pennsylvania State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.68595312,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"26832","last_page":"26855"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/retrieval-augmented-generation","display_name":"retrieval-augmented generation","score":1.0},{"id":"https://openalex.org/keywords/robustness","display_name":"robustness","score":0.7329999804496765},{"id":"https://openalex.org/keywords/security-attacks","display_name":"security attacks","score":0.5640000104904175},{"id":"https://openalex.org/keywords/threat-model","display_name":"threat model","score":0.8450000286102295},{"id":"https://openalex.org/keywords/backdoor-attacks","display_name":"backdoor attacks","score":0.9990000128746033},{"id":"https://openalex.org/keywords/privacy-leakage","display_name":"privacy leakage","score":0.9950000047683716},{"id":"https://openalex.org/keywords/fairness-violations","display_name":"fairness violations","score":0.9039999842643738},{"id":"https://openalex.org/keywords/defense-mechanisms","display_name":"defense mechanisms","score":0.4129999876022339},{"id":"https://openalex.org/keywords/re-ranking","display_name":"re-ranking","score":0.847000002861023},{"id":"https://openalex.org/keywords/traceback","display_name":"traceback","score":0.5440000295639038},{"id":"https://openalex.org/keywords/hallucinations","display_name":"hallucinations","score":0.6320000290870667},{"id":"https://openalex.org/keywords/large-language-models","display_name":"large language models","score":0.7200000286102295},{"id":"https://openalex.org/keywords/robustness-benchmark","display_name":"robustness benchmark","score":0.878000020980835},{"id":"https://openalex.org/keywords/explainability","display_name":"explainability","score":0.9729999899864197}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.9545000195503235},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7235000133514404},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6833999752998352},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6556000113487244},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.46369999647140503},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.3483999967575073},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.34700000286102295},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.30379998683929443},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.29339998960494995},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.2921999990940094},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.2863999903202057},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.27950000762939453},{"id":"https://openalex.org/C3018725008","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber threats","level":2,"score":0.2752000093460083}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.18653/2026.findings-emnlp.1269","doi":"https://doi.org/10.18653/2026.findings-emnlp.1269","is_oa":true,"landing_page_url":"https://doi.org/10.18653/2026.findings-emnlp.1269","pdf_url":"https://aclanthology.org/2026.findings-emnlp.1269.pdf","source":{"id":"https://openalex.org/S7407096085","display_name":"Findings of the Association for Computational Linguistics: EMNLP (Findings of EMNLP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310320244","host_organization_name":"Association for Computational Linguistics","host_organization_lineage":["https://openalex.org/P4310320244"],"host_organization_lineage_names":["Association for Computational Linguistics"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: EMNLP 2026","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2608.24977","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.24977","pdf_url":"https://arxiv.org/pdf/2608.24977","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2608.24977","doi":"https://doi.org/10.48550/arxiv.2608.24977","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2608.24977","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.18653/2026.findings-emnlp.1269","doi":"https://doi.org/10.18653/2026.findings-emnlp.1269","is_oa":true,"landing_page_url":"https://doi.org/10.18653/2026.findings-emnlp.1269","pdf_url":"https://aclanthology.org/2026.findings-emnlp.1269.pdf","source":{"id":"https://openalex.org/S7407096085","display_name":"Findings of the Association for Computational Linguistics: EMNLP (Findings of EMNLP)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310320244","host_organization_name":"Association for Computational Linguistics","host_organization_lineage":["https://openalex.org/P4310320244"],"host_organization_lineage_names":["Association for Computational Linguistics"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Findings of the Association for Computational Linguistics: EMNLP 2026","raw_type":"proceedings-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G5962049731","display_name":"Ph\u01b0\u01a1ng ph\u00e1p bi\u1ec3u di\u1ec5n v\u00e0 suy lu\u1eadn tr\u00ean \u0111\u1ed3 th\u1ecb tri th\u1ee9c \u0111a ph\u01b0\u01a1ng th\u1ee9c cho hi\u1ec3u ng\u1eef c\u1ea3nh v\u00e0 truy v\u1ea5n th\u00f4ng tin","funder_award_id":"102.05-2025.75","funder_id":"https://openalex.org/F4320309617","funder_display_name":"National Foundation for Science and Technology Development"},{"id":"https://openalex.org/G7110693004","display_name":null,"funder_award_id":"102.05","funder_id":"https://openalex.org/F4320309617","funder_display_name":"National Foundation for Science and Technology Development"}],"funders":[{"id":"https://openalex.org/F4320309617","display_name":"National Foundation for Science and Technology Development","ror":"https://ror.org/04rw64z44"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204453404.pdf","grobid_xml":"https://content.openalex.org/works/W7204453404.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7140221703","https://openalex.org/W7165900875","https://openalex.org/W7167290520","https://openalex.org/W7155577088","https://openalex.org/W7153167298","https://openalex.org/W7083831821","https://openalex.org/W7118004596","https://openalex.org/W4414888095","https://openalex.org/W4415044669","https://openalex.org/W4406032661"],"abstract_inverted_index":{"Retrieval-Augmented":[0],"Generation":[1],"(RAG)":[2],"enhances":[3],"large":[4],"language":[5],"models":[6,77],"by":[7],"grounding":[8],"outputs":[9],"in":[10,42,49,141],"external":[11],"knowledge,":[12],"improving":[13],"factuality":[14],"and":[15,27,37,57,69,82,84,93,107,115,122,130],"reducing":[16],"hallucinations.At":[17],"the":[18,21,61,79,103],"same":[19],"time,":[20],"retrieval-augmented":[22],"pipeline":[23],"introduces":[24],"new":[25],"robustness":[26,113],"security":[28],"risks,":[29],"including":[30],"corpus":[31],"poisoning,":[32],"backdoor":[33],"attacks,":[34],"privacy":[35],"leakage,":[36],"fairness":[38],"violations.Despite":[39],"rapid":[40],"progress":[41],"this":[43,142],"area,":[44],"existing":[45],"surveys":[46],"remain":[47],"limited":[48],"their":[50],"treatment":[51],"of":[52,72],"attacker":[53],"objectives,":[54],"threat":[55,76],"models,":[56],"stage-specific":[58],"defenses":[59,97],"across":[60],"full":[62],"RAG":[63,73,124,136],"pipeline.This":[64],"survey":[65],"presents":[66],"a":[67,99,151],"unified":[68],"pipeline-aware":[70,100],"overview":[71],"robustness.We":[74],"formalize":[75],"over":[78],"corpus,":[80],"retriever,":[81],"generator,":[83],"organize":[85],"attacks":[86],"into":[87],"three":[88],"main":[89],"objectives:":[90],"accuracy,":[91],"privacy,":[92],"fairness.We":[94],"further":[95],"review":[96],"from":[98],"perspective,":[101],"covering":[102],"retrieval,":[104],"rerank,":[105],"generation,":[106],"traceback":[108],"stages.In":[109],"addition,":[110],"we":[111,126,146],"summarize":[112],"benchmarks":[114],"explainability":[116],"methods":[117],"for":[118,133],"more":[119],"deeply":[120],"evaluating":[121],"explaining":[123],"robustness.Finally,":[125],"highlight":[127],"open":[128],"challenges":[129],"future":[131],"directions":[132],"building":[134],"trustworthy":[135],"systems.To":[137],"continuously":[138],"track":[139],"developments":[140],"rapidly":[143],"evolving":[144],"field,":[145],"will":[147],"also":[148],"actively":[149],"update":[150],"public":[152],"repository":[153],"at":[154],"https://github.com/":[155],"coutMinh/A-Survey-on-RAG-Robustness.":[156]},"counts_by_year":[],"updated_date":"2026-11-02T09:45:03.842371","created_date":"2026-08-28T00:00:00"}