Data Poisoning via RAG and Knowledge Base Contamination

Consolidated detection for data poisoning attacks targeting both RAG retrieval pipelines and structured knowledge bases. Detects malicious content injected into retrieved documents, FAQ entries, help articles, and indexed data that contains hidden instructions, directive markers, role-override commands, concealment directives, behavioral mode switching, or exfiltration commands. When poisoned content is retrieved as context for the LLM, the embedded instructions can hijack agent behavior, override safety guardrails, or cause data exfiltration.

Response Actions

References