The attacker does not need to control the model if they can control what the model sees.
RAGAI SECURITY ENGINEERING
Retrieval hijacking
Retrieval hijacking manipulates which chunks rank highly enough to enter model context.
A crafted document is optimized to outrank legitimate policy documents for common queries.
Which security control should be explicit?
REMEMBERRanking is a security-relevant decision.
No uploads · No company data · No account required