{"id":"https://openalex.org/W7168400551","doi":"https://doi.org/10.1145/3805712.3809838","title":"AdversarialCoT: Single-Document Retrieval Poisoning for LLM Reasoning","display_name":"AdversarialCoT: Single-Document Retrieval Poisoning for LLM Reasoning","publication_year":2026,"publication_date":"2026-07-15","ids":{"openalex":"https://openalex.org/W7168400551","doi":"https://doi.org/10.1145/3805712.3809838"},"language":null,"primary_location":{"id":"doi:10.1145/3805712.3809838","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3805712.3809838","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 49th International ACM SIGIR Conference on Research and Development in Information Retrieval","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3805712.3809838","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5140836461","display_name":"Hongru Song","orcid":"https://orcid.org/0009-0000-8443-9499"},"institutions":[{"id":"https://openalex.org/I4210090176","display_name":"Institute of Computing Technology","ror":"https://ror.org/0090r4d87","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210090176"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongru Song","raw_affiliation_strings":["State Key Laboratory of AI Safety, Beijing, China, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China, and University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0000-8443-9499","affiliations":[{"raw_affiliation_string":"State Key Laboratory of AI Safety, Beijing, China, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China, and University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210090176"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140924836","display_name":"Yu-An Liu","orcid":"https://orcid.org/0000-0002-9125-5097"},"institutions":[{"id":"https://openalex.org/I4210090176","display_name":"Institute of Computing Technology","ror":"https://ror.org/0090r4d87","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210090176"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu-An Liu","raw_affiliation_strings":["State Key Laboratory of AI Safety, Beijing, China, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China, and University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-9125-5097","affiliations":[{"raw_affiliation_string":"State Key Laboratory of AI Safety, Beijing, China, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China, and University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210090176"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140888101","display_name":"Ruqing Zhang","orcid":"https://orcid.org/0000-0003-4294-2541"},"institutions":[{"id":"https://openalex.org/I4210090176","display_name":"Institute of Computing Technology","ror":"https://ror.org/0090r4d87","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210090176"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruqing Zhang","raw_affiliation_strings":["State Key Laboratory of AI Safety, Beijing, China, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China, and University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-4294-2541","affiliations":[{"raw_affiliation_string":"State Key Laboratory of AI Safety, Beijing, China, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China, and University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210090176"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140958864","display_name":"Jiafeng Guo","orcid":"https://orcid.org/0000-0002-9509-8674"},"institutions":[{"id":"https://openalex.org/I4210090176","display_name":"Institute of Computing Technology","ror":"https://ror.org/0090r4d87","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210090176"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiafeng Guo","raw_affiliation_strings":["State Key Laboratory of AI Safety, Beijing, China, Institute of Computing Technolgy, Chinese Academy of Sciences, Beijing, China, and University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-9509-8674","affiliations":[{"raw_affiliation_string":"State Key Laboratory of AI Safety, Beijing, China, Institute of Computing Technolgy, Chinese Academy of Sciences, Beijing, China, and University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210090176"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140875532","display_name":"Maarten de Rijke","orcid":"https://orcid.org/0000-0002-1086-0202"},"institutions":[{"id":"https://openalex.org/I4210135670","display_name":"Amsterdam University of the Arts","ror":"https://ror.org/04dde1554","country_code":"NL","type":"education","lineage":["https://openalex.org/I4210135670"]},{"id":"https://openalex.org/I887064364","display_name":"University of Amsterdam","ror":"https://ror.org/04dkp9463","country_code":"NL","type":"education","lineage":["https://openalex.org/I887064364"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Maarten de Rijke","raw_affiliation_strings":["University of Amsterdam, Amsterdam, Netherlands"],"raw_orcid":"https://orcid.org/0000-0002-1086-0202","affiliations":[{"raw_affiliation_string":"University of Amsterdam, Amsterdam, Netherlands","institution_ids":["https://openalex.org/I4210135670","https://openalex.org/I887064364"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5140888605","display_name":"Yixing Fan","orcid":"https://orcid.org/0000-0003-4317-2702"},"institutions":[{"id":"https://openalex.org/I4210090176","display_name":"Institute of Computing Technology","ror":"https://ror.org/0090r4d87","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210090176"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yixing Fan","raw_affiliation_strings":["State Key Laboratory of AI Safety, Beijing, China, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China, and University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-4317-2702","affiliations":[{"raw_affiliation_string":"State Key Laboratory of AI Safety, Beijing, China, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China, and University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210090176"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5140849081","display_name":"Xueqi Cheng","orcid":"https://orcid.org/0000-0002-5201-8195"},"institutions":[{"id":"https://openalex.org/I4210090176","display_name":"Institute of Computing Technology","ror":"https://ror.org/0090r4d87","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210090176"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xueqi Cheng","raw_affiliation_strings":["State Key Laboratory of AI Safety, Beijing, China, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China, and University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-5201-8195","affiliations":[{"raw_affiliation_string":"State Key Laboratory of AI Safety, Beijing, China, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China, and University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210090176"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"4145","last_page":"4150"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":null,"topics":[],"keywords":[{"id":"https://openalex.org/keywords/action","display_name":"Action (physics)","score":0.29679998755455017},{"id":"https://openalex.org/keywords/case-based-reasoning","display_name":"Case-based reasoning","score":0.2874000072479248},{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.24979999661445618},{"id":"https://openalex.org/keywords/poison-control","display_name":"Poison control","score":0.225600004196167}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.43369999527931213},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4153999984264374},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.32510000467300415},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.29679998755455017},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.29030001163482666},{"id":"https://openalex.org/C20162079","wikidata":"https://www.wikidata.org/wiki/Q1151406","display_name":"Case-based reasoning","level":2,"score":0.2874000072479248},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.24979999661445618},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.23919999599456787},{"id":"https://openalex.org/C3017944768","wikidata":"https://www.wikidata.org/wiki/Q1450463","display_name":"Poison control","level":2,"score":0.225600004196167},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.22380000352859497}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3805712.3809838","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3805712.3809838","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 49th International ACM SIGIR Conference on Research and Development in Information Retrieval","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3805712.3809838","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3805712.3809838","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 49th International ACM SIGIR Conference on Research and Development in Information Retrieval","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W2889787757","https://openalex.org/W3188983256","https://openalex.org/W4224330422","https://openalex.org/W4386080721","https://openalex.org/W4388778348","https://openalex.org/W4391631327","https://openalex.org/W4393147751","https://openalex.org/W4406123425","https://openalex.org/W4406273114","https://openalex.org/W4406779522","https://openalex.org/W4409159741","https://openalex.org/W4412888013","https://openalex.org/W4417281246","https://openalex.org/W4417422257","https://openalex.org/W7133204634"],"related_works":[],"abstract_inverted_index":{"Retrieval-augmented":[0],"generation":[1],"(RAG)":[2],"enhances":[3],"large":[4],"language":[5],"model":[6],"(LLM)":[7],"reasoning":[8,82,109,124,148],"by":[9,41,46],"retrieving":[10],"external":[11],"documents,":[12,60],"but":[13],"also":[14],"opens":[15],"up":[16],"new":[17],"attack":[18,66],"surfaces.":[19],"We":[20],"study":[21,132],"knowledge-base":[22],"poisoning":[23],"attacks":[24],"in":[25,73,136],"RAG,":[26],"where":[27],"an":[28,89],"attacker":[29],"injects":[30],"malicious":[31],"content":[32],"into":[33],"the":[34,42,47,56,74,79,86,102],"retrieval":[35],"corpus,":[36],"which":[37],"is":[38,96],"then":[39],"surfaced":[40],"retriever":[43],"and":[44,106,139],"consumed":[45],"LLM":[48,147],"during":[49],"reasoning.":[50],"Unlike":[51],"prior":[52],"work":[53],"that":[54,67,116],"floods":[55],"corpus":[57],"with":[58,101],"poisoned":[59],"we":[61],"propose":[62],"AdversarialCoT,":[63],"a":[64,70,117],"query-specific":[65],"poisons":[68],"only":[69],"single":[71,118],"document":[72,95,120],"corpus.":[75],"AdversarialCoT":[76],"first":[77],"extracts":[78],"target":[80],"LLM's":[81],"framework":[83],"to":[84],"guide":[85],"construction":[87],"of":[88],"initial":[90],"adversarial":[91,94,119],"chain-of-thought.":[92],"The":[93],"iteratively":[97],"refined":[98],"through":[99],"interactions":[100],"LLM,":[103],"progressively":[104],"exposing":[105],"exploiting":[107],"critical":[108],"vulnerabilities.":[110],"Experiments":[111],"on":[112],"benchmark":[113],"LLMs":[114],"show":[115],"can":[121],"significantly":[122],"degrade":[123],"accuracy,":[125],"revealing":[126],"subtle":[127],"yet":[128],"impactful":[129],"weaknesses.":[130],"Our":[131],"exposes":[133],"security":[134],"risks":[135],"RAG":[137],"systems":[138],"provides":[140],"actionable":[141],"insights":[142],"for":[143],"designing":[144],"more":[145],"robust":[146],"pipelines.":[149]},"counts_by_year":[],"updated_date":"2026-07-17T09:13:05.818461","created_date":"2026-07-16T00:00:00"}