{"id":"https://openalex.org/W7223931663","doi":"https://doi.org/10.48550/arxiv.2610.34829","title":"Logic Hijacking of RAG: Single-Document Poisoning via Local Optimization","display_name":"Logic Hijacking of RAG: Single-Document Poisoning via Local Optimization","publication_year":2026,"publication_date":"2026-10-26","ids":{"openalex":"https://openalex.org/W7223931663","doi":"https://doi.org/10.48550/arxiv.2610.34829"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2610.34829","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.34829","pdf_url":"https://arxiv.org/pdf/2610.34829","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2610.34829","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5125391079","display_name":"Hangyi Zhao","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I6469544","display_name":"City University of Macau","ror":"https://ror.org/04gpd4q15","country_code":"MO","type":"education","lineage":["https://openalex.org/I6469544"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Zhao, Hangyi","raw_affiliation_strings":["Faculty of Data Science, City University of Macau, Macau, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Data Science, City University of Macau, Macau, China","institution_ids":["https://openalex.org/I6469544"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038323543","display_name":"Bonan Zhang","orcid":"https://orcid.org/0009-0004-5145-9521","observed_orcids":["https://orcid.org/0009-0004-5145-9521"]},"institutions":[{"id":"https://openalex.org/I6469544","display_name":"City University of Macau","ror":"https://ror.org/04gpd4q15","country_code":"MO","type":"education","lineage":["https://openalex.org/I6469544"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Zhang, Bonan","raw_affiliation_strings":["Faculty of Data Science, City University of Macau, Macau, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Data Science, City University of Macau, Macau, China","institution_ids":["https://openalex.org/I6469544"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032970879","display_name":"Fusen Guo","orcid":"https://orcid.org/0009-0007-9142-697X","observed_orcids":["https://orcid.org/0009-0007-9142-697X"]},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]},{"id":"https://openalex.org/I4394709116","display_name":"UNSW Canberra","ror":"https://ror.org/0125wpx05","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571","https://openalex.org/I4394709116"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Guo, Fusen","raw_affiliation_strings":["School of Systems and Computing, UNSW Sydney, Canberra, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Systems and Computing, UNSW Sydney, Canberra, Australia","institution_ids":["https://openalex.org/I31746571","https://openalex.org/I4394709116"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5159741368","display_name":"Jiaheng Wei","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I82951845","display_name":"RMIT University","ror":"https://ror.org/04ttjf776","country_code":"AU","type":"education","lineage":["https://openalex.org/I82951845"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Wei, Jiaheng","raw_affiliation_strings":["RMIT University, Melbourne, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"RMIT University, Melbourne, Australia","institution_ids":["https://openalex.org/I82951845"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5159944162","display_name":"Chao Chen","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I82951845","display_name":"RMIT University","ror":"https://ror.org/04ttjf776","country_code":"AU","type":"education","lineage":["https://openalex.org/I82951845"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Chen, Chao","raw_affiliation_strings":["RMIT University, Melbourne, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"RMIT University, Melbourne, Australia","institution_ids":["https://openalex.org/I82951845"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5130196828","display_name":"Tianqing Zhu","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I6469544","display_name":"City University of Macau","ror":"https://ror.org/04gpd4q15","country_code":"MO","type":"education","lineage":["https://openalex.org/I6469544"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Zhu, Tianqing","raw_affiliation_strings":["Faculty of Data Science, City University of Macau, Macau, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Data Science, City University of Macau, Macau, China","institution_ids":["https://openalex.org/I6469544"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/retrieval-augmented-generation","display_name":"retrieval-augmented generation","score":0.9610000252723694},{"id":"https://openalex.org/keywords/black-box-attacks","display_name":"black-box attacks","score":0.7879999876022339},{"id":"https://openalex.org/keywords/llm-alignment","display_name":"LLM alignment","score":0.5440000295639038},{"id":"https://openalex.org/keywords/local-optimization","display_name":"local optimization","score":0.5839999914169312},{"id":"https://openalex.org/keywords/monologue","display_name":"monologue","score":0.8370000123977661}],"concepts":[{"id":"https://openalex.org/C108650721","wikidata":"https://www.wikidata.org/wiki/Q1783253","display_name":"Counterfactual thinking","level":2,"score":0.7900999784469604},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.715399980545044},{"id":"https://openalex.org/C199033989","wikidata":"https://www.wikidata.org/wiki/Q1318295","display_name":"Narrative","level":2,"score":0.6498000025749207},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6345000267028809},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.5544999837875366},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5396999716758728},{"id":"https://openalex.org/C117251300","wikidata":"https://www.wikidata.org/wiki/Q1849855","display_name":"Parametric statistics","level":2,"score":0.5390999913215637},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5267000198364258},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.39959999918937683},{"id":"https://openalex.org/C2780992000","wikidata":"https://www.wikidata.org/wiki/Q17016113","display_name":"Generator (circuit theory)","level":3,"score":0.3434000015258789},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.3425999879837036},{"id":"https://openalex.org/C138268822","wikidata":"https://www.wikidata.org/wiki/Q1051925","display_name":"Resolution (logic)","level":2,"score":0.3328999876976013},{"id":"https://openalex.org/C44725695","wikidata":"https://www.wikidata.org/wiki/Q288156","display_name":"Normative","level":2,"score":0.30469998717308044},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2996000051498413},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.298799991607666},{"id":"https://openalex.org/C54525549","wikidata":"https://www.wikidata.org/wiki/Q2553445","display_name":"Weaving","level":2,"score":0.2766000032424927},{"id":"https://openalex.org/C40422974","wikidata":"https://www.wikidata.org/wiki/Q741248","display_name":"Assertion","level":2,"score":0.27559998631477356},{"id":"https://openalex.org/C59577422","wikidata":"https://www.wikidata.org/wiki/Q10265143","display_name":"False accusation","level":2,"score":0.2703999876976013},{"id":"https://openalex.org/C2776007630","wikidata":"https://www.wikidata.org/wiki/Q2798912","display_name":"Accountability","level":2,"score":0.2702000141143799},{"id":"https://openalex.org/C3017944768","wikidata":"https://www.wikidata.org/wiki/Q1450463","display_name":"Poison control","level":2,"score":0.2687999904155731},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.26840001344680786},{"id":"https://openalex.org/C2778137410","wikidata":"https://www.wikidata.org/wiki/Q2732820","display_name":"Government (linguistics)","level":2,"score":0.2653000056743622},{"id":"https://openalex.org/C2777834853","wikidata":"https://www.wikidata.org/wiki/Q96776939","display_name":"Liability","level":2,"score":0.26330000162124634},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.2605000138282776},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.2556999921798706},{"id":"https://openalex.org/C7991579","wikidata":"https://www.wikidata.org/wiki/Q17955","display_name":"Criticism","level":2,"score":0.25440001487731934}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2610.34829","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.34829","pdf_url":"https://arxiv.org/pdf/2610.34829","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2610.34829","doi":"https://doi.org/10.48550/arxiv.2610.34829","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2610.34829","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2610.34829","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.34829","pdf_url":"https://arxiv.org/pdf/2610.34829","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7223931663.pdf","grobid_xml":"https://content.openalex.org/works/W7223931663.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7172499403","https://openalex.org/W7212316521","https://openalex.org/W6979274403","https://openalex.org/W4416124948","https://openalex.org/W7213473533","https://openalex.org/W7204748151","https://openalex.org/W7162790142","https://openalex.org/W7168400551","https://openalex.org/W7223921691","https://openalex.org/W7214069661"],"abstract_inverted_index":{"Single-document":[0],"corpus":[1],"poisoning":[2,56,153],"under":[3],"black-box":[4],"access":[5],"poses":[6],"a":[7,54,85],"severe":[8],"threat":[9],"to":[10],"Retrieval-Augmented":[11],"Generation":[12],"(RAG).":[13],"However,":[14],"existing":[15],"attacks":[16],"predominantly":[17],"rely":[18],"on":[19,59],"explicit":[20,63],"factual":[21],"refutations":[22],"or":[23,43],"imperative":[24],"instruction":[25],"overrides.":[26],"Modern":[27],"aligned":[28],"LLMs":[29],"often":[30],"arbitrate":[31],"such":[32],"conflicts":[33],"conservatively,":[34],"rejecting":[35],"overt":[36],"contradictions":[37],"in":[38],"favor":[39],"of":[40],"parametric":[41],"memory":[42],"clean":[44],"retrieved":[45],"context":[46],"while":[47],"triggering":[48],"input":[49],"guardrails.":[50],"We":[51],"propose":[52],"MONOLOGUE,":[53],"single-document":[55,152],"framework":[57],"based":[58],"Logic":[60],"Hijacking":[61],"without":[62],"refutation.":[64],"Rather":[65],"than":[66],"disputing":[67],"the":[68,82,95,99,144,150],"ground":[69],"truth,":[70],"our":[71,141],"method":[72,142],"concedes":[73],"it":[74],"as":[75,98],"an":[76],"authoritative":[77],"historical":[78],"baseline":[79],"before":[80],"introducing":[81],"update,":[83],"weaving":[84],"grounded":[86],"record-correction":[87],"narrative":[88],"(e.g.,":[89],"dated":[90],"institutional":[91],"reattributions)":[92],"that":[93,140],"presents":[94],"counterfactual":[96],"target":[97],"most":[100],"recent":[101],"update.":[102],"To":[103],"prevent":[104],"suspicious":[105],"live":[106],"writes,":[107],"payloads":[108],"are":[109],"refined":[110],"entirely":[111],"offline":[112],"via":[113],"local":[114],"multi-dimensional":[115],"gated":[116],"optimization,":[117],"coupling":[118],"automated":[119],"text":[120],"quality":[121],"audits":[122],"with":[123],"surrogate":[124],"behavioral":[125],"verification.":[126],"Evaluations":[127],"across":[128],"three":[129,131],"benchmarks,":[130],"retrieval":[132],"backends,":[133],"and":[134],"four":[135],"open-weight":[136],"generator":[137],"regimes":[138],"show":[139],"achieves":[143],"strongest":[145],"overall":[146],"attack":[147],"efficacy":[148],"among":[149],"evaluated":[151],"attacks.":[154]},"counts_by_year":[],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2026-10-28T00:00:00"}