Google Paper Finds Query Echoing Is Key to RAG Poisoning

1 reports archived1 independent sourcesupdated 11/6/2026, 02:24:11

Synthesis & Latest Updates

1 Sources Cross-Validated

A new Google paper shows that RAG poisoning hinges less on the attack payload than on echoing the user's query so poisoned documents get retrieved. Across 623 queries, just 5 documents (about 0.1% of the corpus) degraded classic retriever ranking quality by 40.2% to 61.5%; filtering query-echoing documents blocked the attack but halved clean ranking quality on NFCorpus from 0.267 to 0.134.

LATEST/A new Google paper shows that RAG poisoning hinges less on the attack payload than on echoing the user's query so poisoned documents get retrieved. Across 623 queries, just 5 documents (about 0.1% of the corpus) degraded classic retriever ranking quality by 40.2% to 61.5%; filtering query-echoing documents blocked the attack but halved clean ranking quality on NFCorpus from 0.267 to 0.134.

Hourly heat curve

2 fully observed hours

Fewer than 3 fully observed hours; trend not plotted yet.

Coverage timeline

Total 1 reports · Latest first

Rohan Paul (@rohanpaul_ai)T2Nov 6, 02:24·78 pts
Google Paper Finds Query Echoing Is Key to RAG Poisoning
- Poisoning works mainly by echoing the user query; the attack payload barely affects retrieval
- Just 5 documents (~0.1% of corpus) cut classic retriever ranking quality by 40.2% to 61.5%
- Filtering query-echoing documents blocks the attack but drops clean NFCorpus ranking quality from 0.267 to 0.134
View Related Reports & Analysis Original Source