Attackers may target the knowledge supply chain instead of the chat interface.
RAGAI SECURITY ENGINEERING
Ingestion poisoning
Ingestion poisoning places malicious or misleading content into sources that later influence retrieval and model behavior.
A shared document contains instructions that are later retrieved by a support agent.
Which security control should be explicit?
REMEMBERSecure what enters the knowledge base.
No uploads · No company data · No account required