[USENIX Security 2025] PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models
☆306Jan 27, 2026Updated 9 months ago
Alternatives and similar repositories for PoisonedRAG
Users that are interested in PoisonedRAG are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- [EMNLP 2023] Poisoning Retrieval Corpora by Injecting Adversarial Passages https://arxiv.org/abs/2310.19156☆51Dec 14, 2023Updated 2 years ago
- ☆34Sep 15, 2024Updated 2 years ago
- [NeurIPS 2024] Official implementation for "AgentPoison: Red-teaming LLM Agents via Memory or Knowledge Base Backdoor Poisoning"☆250Updated this week
- [AAAI 2026] Official implementation of "Joint-GCG: Unified Gradient-Based Poisoning Attacks on Retrieval-Augmented Generation Systems".☆21Mar 23, 2026Updated 7 months ago
- ☆25Jan 6, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Code for "TrustRAG: Enhancing Robustness and Trustworthiness in RAG" AAAI 2026 Workshop on Trust and Control in Agentic AI (TrustAgent)☆62Mar 24, 2025Updated last year
- ☆66Mar 11, 2025Updated last year
- Official PyTorch implementation of "MM-PoisonRAG: Disrupting Multimodal RAG with Local and Global Poisoning Attacks"☆19Dec 4, 2025Updated 10 months ago
- Official Implementation of "Who Taught the Lie? Responsibility Attribution for Poisoned Knowledge in Retrieval-Augmented Generation" and …☆21Dec 24, 2025Updated 10 months ago
- [USENIX Security 2025] Topic-FlipRAG: Topic-Orientated Adversarial Opinion Manipulation Attacks to Retrieval-Augmented Generation Models☆19Jun 21, 2025Updated last year
- ☆118Sep 30, 2026Updated 3 weeks ago
- This repository provides a benchmark for prompt injection attacks and defenses in LLMs☆510Sep 27, 2026Updated last month
- SEO attack on dense embedding-based retrieval via poisoning☆15Dec 6, 2025Updated 10 months ago
- Code to generate NeuralExecs (prompt injection for LLMs)☆27Oct 5, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- This repo is an investigation of how we can defend against knowledge poisoning attacks, as described in the "PoisonedRAG" paper.☆12Jun 14, 2024Updated 2 years ago
- Agent Security Bench (ASB)☆322Sep 30, 2026Updated 3 weeks ago
- Code&Data for the paper "Watch Out for Your Agents! Investigating Backdoor Threats to LLM-Based Agents" [NeurIPS 2024]☆118Sep 27, 2024Updated 2 years ago
- ☆14Mar 10, 2025Updated last year
- Code for "Backdoor Attacks on Dense Passage Retrievers for Disseminating Misinformation"☆10Nov 11, 2025Updated 11 months ago
- [ACL'26 Main Oral] Official code for "LogicPoison: Logical Attacks on Graph Retrieval-Augmented Generation".☆49Aug 25, 2026Updated 2 months ago
- [EMNLP 2026] PISanitizer: Preventing Prompt Injection to Long-Context LLMs via Prompt Sanitization☆20Aug 21, 2026Updated 2 months ago
- This repository contains data and code used for On the Risk of Misinformation Pollution with Large Language Models (EMNLP 2023 Findings).☆17Dec 14, 2023Updated 2 years ago
- ☆15Jun 28, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- A Dynamic Environment to Evaluate Attacks and Defenses for LLM Agents.☆962Jun 2, 2026Updated 4 months ago
- Code of ICML 2025 paper "PoisonedEye: Knowledge Poisoning Attack on Retrieval-Augmented Generation based Large Vision-Language Models"☆16Oct 30, 2025Updated 11 months ago
- ☆82Jan 21, 2026Updated 9 months ago
- ☆16Aug 9, 2025Updated last year
- [ICLR24] Official Repo of BadChain: Backdoor Chain-of-Thought Prompting for Large Language Models☆57Jul 24, 2024Updated 2 years ago
- [NAACL 2025 Main] Official implementation of "From Allies to Adversaries: Manipulating LLM Tool Scheduling through Adversarial Injection"…☆23Jun 11, 2025Updated last year
- ☆23Oct 25, 2024Updated 2 years ago
- A reading list for large models safety, security, and privacy (including Awesome LLM Security, Safety, etc.).☆2,093Sep 2, 2026Updated last month
- Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks☆100Aug 29, 2026Updated 2 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆180Jul 2, 2024Updated 2 years ago
- A fast + lightweight implementation of the GCG algorithm in PyTorch☆355May 13, 2025Updated last year
- ☆32Oct 27, 2025Updated last year
- ICL backdoor attack☆17Nov 4, 2024Updated last year
- Papers and resources related to the security and privacy of LLMs 🤖☆586Jun 8, 2025Updated last year
- [CCS 2024] Optimization-based Prompt Injection Attack to LLM-as-a-Judge☆41Sep 17, 2025Updated last year
- Implement of Implicit Knowledge Extraction Attack.☆25Jul 14, 2026Updated 3 months ago