Rag Poisoning

Chunk Boundary Exploitation

1. Place injection payloads at chunk boundaries where they span two chunks
2. Test if chunking preserves or breaks injection payloads
3. Exploit overlap regions in sliding-window chunking
4. Place different instructions in adjacent chunks

Cross-Tenant Poisoning

1. In multi-tenant RAG: upload documents that affect other tenants
2. Test namespace isolation in vector databases
3. Check if document access controls are enforced at retrieval time

Retrieval Manipulation

1. SEO-style optimization for vector search — craft documents that rank highly
2. Flood the knowledge base to dilute legitimate documents
3. Test if the system validates document source/authenticity

Output

Attack vector, poisoned document details, retrieval impact, cross-contamination evidence, severity.