{"id":"https://openalex.org/W7164302049","doi":"https://doi.org/10.48550/arxiv.2606.11265","title":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","display_name":"When Poison Fails After Retrieval: Revisiting Corpus Poisoning under Chunking and Reranking Pipelines","publication_year":2026,"publication_date":"2026-06-09","ids":{"openalex":"https://openalex.org/W7164302049","doi":"https://doi.org/10.48550/arxiv.2606.11265"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.11265","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.11265","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.11265","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5043082159","display_name":"Xi Nie","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nie, Xi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138469733","display_name":"Hongwei Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Hongwei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029337585","display_name":"Shenghao Wu","orcid":"https://orcid.org/0009-0003-8624-8057"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wu, Shenghao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138450033","display_name":"Mingxuan Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Mingxuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138403866","display_name":"Jiachen Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Jiachen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5138443289","display_name":"Wenbo Jiang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiang, Wenbo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.29249998927116394,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.29249998927116394,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.1363999992609024,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10286","display_name":"Information Retrieval and Search Behavior","score":0.0714000016450882,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/chunking","display_name":"Chunking (psychology)","score":0.6150000095367432},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.48080000281333923},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.4609000086784363},{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.42820000648498535},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.3919999897480011}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7236999869346619},{"id":"https://openalex.org/C203357204","wikidata":"https://www.wikidata.org/wiki/Q1089605","display_name":"Chunking (psychology)","level":2,"score":0.6150000095367432},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.48080000281333923},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4699999988079071},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.4609000086784363},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.42820000648498535},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3977000117301941},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3919999897480011},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.328900009393692},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.3089999854564667},{"id":"https://openalex.org/C175309249","wikidata":"https://www.wikidata.org/wiki/Q725864","display_name":"Pipeline transport","level":2,"score":0.3010999858379364},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.289900004863739}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.11265","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.11265","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.11265","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.11265","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Retrieval-Augmented":[0],"Generation":[1],"(RAG)":[2],"systems":[3,204],"are":[4,83,161],"vulnerable":[5],"to":[6,133,164],"corpus":[7,46],"poisoning":[8,23,47,114,159,200],"attacks":[9,58],"that":[10,55,116,139,157,199],"manipulate":[11],"downstream":[12],"model":[13],"outputs":[14],"through":[15],"malicious":[16],"knowledge":[17],"injection.":[18],"Existing":[19],"studies":[20],"mainly":[21],"evaluate":[22],"under":[24,48,142],"simplified":[25],"retrieval":[26,51,70,119,183,211],"settings,":[27],"overlooking":[28],"practical":[29],"RAG":[30,149,194,203],"pipelines":[31,52],"involving":[32],"document":[33],"chunking,":[34,87],"dense":[35],"retrieval,":[36],"reranking,":[37],"and":[38,53,93,109,123,154,167,178,197],"grounded":[39],"generation.":[40],"In":[41],"this":[42,78,104],"paper,":[43],"we":[44,106],"revisit":[45],"realistic":[49,182],"multi-stage":[50,210],"show":[54,156],"many":[56],"existing":[57,158],"substantially":[59,173],"degrade":[60],"after":[61],"reranking":[62,168],"despite":[63],"achieving":[64],"high":[65],"retrieval-stage":[66],"relevance.":[67],"We":[68],"identify":[69],"granularity":[71],"mismatch":[72],"as":[73,208],"a":[74,113,209,216],"key":[75],"reason":[76],"for":[77],"failure:":[79],"document-level":[80],"adversarial":[81,137],"signals":[82],"often":[84],"fragmented":[85],"during":[86,131],"while":[88],"rerankers":[89,155],"favor":[90],"locally":[91,135],"coherent":[92],"answer-bearing":[94],"passages":[95,138],"rather":[96,214],"than":[97,215],"globally":[98],"optimized":[99],"semantic":[100],"similarity.":[101],"Based":[102],"on":[103,147],"observation,":[105],"propose":[107],"Chunk-aware":[108],"Rerank-Consistent":[110],"Poisoning":[111],"(CRCP),":[112],"framework":[115],"jointly":[117],"optimizes":[118],"relevance,":[120],"reranker":[121],"consistency,":[122],"chunk-boundary":[124],"robustness.":[125],"CRCP":[126,171],"explicitly":[127],"models":[128],"chunking":[129,144],"transformations":[130],"optimization":[132],"generate":[134],"self-contained":[136],"remain":[140],"effective":[141],"varying":[143],"configurations.":[145],"Experiments":[146],"standard":[148],"benchmarks":[150],"with":[151],"multiple":[152],"retrievers":[153],"methods":[160],"highly":[162],"sensitive":[163],"chunk":[165],"size":[166],"strategies,":[169],"whereas":[170],"achieves":[172],"higher":[174],"attack":[175],"success":[176],"rates":[177],"stronger":[179],"robustness":[180],"across":[181],"pipelines.":[184],"Our":[185],"findings":[186],"highlight":[187],"an":[188],"important":[189],"realism":[190],"gap":[191],"in":[192,201],"current":[193],"security":[195],"evaluation":[196],"suggest":[198],"modern":[202],"should":[205],"be":[206],"studied":[207],"consistency":[212],"problem":[213],"retrieval-only":[217],"problem.":[218]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-12T00:00:00"}