{"id":"https://openalex.org/W7165165530","doi":"https://doi.org/10.48550/arxiv.2606.18310","title":"Conflict-Aware Retriever Editing for Knowledge Injection Attacks on LLM-Based RAG Systems","display_name":"Conflict-Aware Retriever Editing for Knowledge Injection Attacks on LLM-Based RAG Systems","publication_year":2026,"publication_date":"2026-06-16","ids":{"openalex":"https://openalex.org/W7165165530","doi":"https://doi.org/10.48550/arxiv.2606.18310"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.18310","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.18310","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.18310","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138837843","display_name":"Xinru Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Xinru","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138941402","display_name":"Xianglong Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Xianglong","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113912670","display_name":"Di Cai","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cai, Di","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138846292","display_name":"Zhumin Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Zhumin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035383693","display_name":"P Hu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Pengfei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5138953466","display_name":"Xin Xin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xin, Xin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.3675999939441681,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.3675999939441681,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.3619999885559082,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10286","display_name":"Information Retrieval and Search Behavior","score":0.031099999323487282,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.5041999816894531},{"id":"https://openalex.org/keywords/labrador-retriever","display_name":"Labrador Retriever","score":0.42089998722076416},{"id":"https://openalex.org/keywords/baseline","display_name":"Baseline (sea)","score":0.30410000681877136},{"id":"https://openalex.org/keywords/reverse-engineering","display_name":"Reverse engineering","score":0.30079999566078186},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.29269999265670776}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6039000153541565},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5221999883651733},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5041999816894531},{"id":"https://openalex.org/C2910597052","wikidata":"https://www.wikidata.org/wiki/Q38726","display_name":"Labrador Retriever","level":2,"score":0.42089998722076416},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.30410000681877136},{"id":"https://openalex.org/C207850805","wikidata":"https://www.wikidata.org/wiki/Q269608","display_name":"Reverse engineering","level":2,"score":0.30079999566078186},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.29269999265670776},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2872999906539917},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.2743000090122223},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.2727000117301941},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2615000009536743},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.25600001215934753}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.18310","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.18310","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.18310","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.18310","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7444208860397339}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Injecting":[0],"malicious":[1,38,87,119,186],"knowledge":[2,33,88,120,191],"into":[3,188],"retrieval-augmented":[4],"generation":[5],"(RAG)":[6],"systems":[7,67,194,216],"can":[8,196],"manipulate":[9],"retrieved":[10,190],"evidence":[11],"and":[12,101,125,134,170,172,195,204],"mislead":[13],"downstream":[14],"generation,":[15],"posing":[16],"a":[17,81,226],"serious":[18],"security":[19],"threat":[20],"for":[21,86,162,199],"AI":[22],"applications.":[23],"Existing":[24],"RAG":[25,66,193,215,231],"injection":[26,89],"attacks":[27,198],"mainly":[28],"rely":[29],"on":[30,145,154,168,175],"manipulating":[31],"external":[32],"bases,":[34],"such":[35,46],"as":[36],"crafting":[37],"corpus.":[39],"However,":[40],"the":[41,54,114,146,152,159,189,207],"synthetic":[42],"text":[43],"crafted":[44],"by":[45],"data-centric":[47],"methods":[48],"could":[49],"be":[50],"detectable,":[51],"leading":[52],"to":[53,68,113,149],"failure":[55],"of":[56,97,192,201,209],"attacks.":[57,70],"Beyond":[58],"corpus":[59],"manipulation,":[60],"open-source":[61,220],"retrievers":[62],"are":[63,217,234],"increasingly":[64],"exposing":[65],"model-centric":[69,82],"In":[71],"this":[72,223],"paper,":[73],"we":[74],"propose":[75],"conflict-aware":[76,98],"retriever":[77,83,99,106,148],"editing,":[78],"i.e.,":[79],"CAREATTACK,":[80],"attack":[84,160,228],"framework":[85],"in":[90,230],"RAG.":[91],"Specifically,":[92],"CAREATTACK":[93,167],"consists":[94],"two":[95],"stages":[96],"editing":[100,107,112,136],"attack-preserving":[102,139],"anchor":[103,140],"repair.":[104],"Conflict-aware":[105],"adapts":[108],"efficient":[109],"closed-form":[110],"parameter":[111,128,135],"dense":[115],"retrieval":[116,210,221],"model,":[117],"promoting":[118],"above":[121],"benign":[122],"competing":[123],"passages":[124,187],"resolving":[126],"potential":[127],"conflicts":[129],"through":[130],"graph-based":[131],"conflict":[132],"detection":[133],"projection.":[137],"Then,":[138],"repair":[141],"performs":[142],"lightweight":[143],"calibration":[144],"edited":[147],"further":[150],"eliminate":[151],"impact":[153],"non-target":[155],"prompts":[156,203],"while":[157],"preserving":[158],"effectiveness":[161],"target":[163,202],"prompts.":[164],"We":[165],"instantiate":[166],"Qwen3-Embedding-0.6B":[169],"BGE-M3,":[171],"conduct":[173],"evaluation":[174],"three":[176],"benchmark":[177],"datasets.":[178],"Experimental":[179],"results":[180],"demonstrate":[181],"our":[182],"method":[183],"substantially":[184],"promote":[185],"perform":[197],"batches":[200],"passages,":[205],"given":[206],"access":[208],"model":[211],"parameters.":[212],"Since":[213],"most":[214],"built":[218],"upon":[219],"models,":[222],"work":[224],"reveals":[225],"practical":[227],"surface":[229],"systems.":[232],"Codes":[233],"public":[235],"accessible":[236],"at":[237],"https://anonymous.4open.science/r/CareAttack-3F1C.":[238]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-19T00:00:00"}