{"id":"W7106845393","doi":"10.48448/gaqz-1x28","title":"The RAG Paradox: A Black-Box Attack Exploiting Unintentional Vulnerabilities in Retrieval-Augmented Generation Systems","year":2025,"lang":"","type":"other","venue":"Open MIND","topic":"","field":"","cited_by":0,"is_retracted":false,"has_abstract":true,"ca_institutions":"Kootenay Association for Science & Technology","funders":"","keywords":"Upload; Transparency (behavior); Vulnerability (computing); Retrievability; Work (physics); Information sensitivity; Rootkit","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.004127444,0.0008911463,0.0008245879,0.001056581,0.001245259,0.00290972,0.001718611,0.002592817,0.003944815],"category_scores_gemma":[0.0243174,0.0005350694,0.0008405308,0.0007818099,0.003433746,0.007130666,0.005187353,0.002248873,0.001720315],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0008666707,"about_ca_system_score_gemma":0.001127936,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001323189,"about_ca_topic_score_gemma":0.0008704358,"domain_scores_codex":[0.9935272,0.002601071,0.0004146421,0.0007541935,0.002190225,0.0005126102],"domain_scores_gemma":[0.9763783,0.01019185,0.002183618,0.009593264,0.001252399,0.0004004948],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.003423468,0.0008734941,0.02163023,0.001355677,0.0005755851,0.006673763,0.00592026,0.1263799,0.1379588,0.1887954,0.03908514,0.4673282],"study_design_scores_gemma":[0.0002010032,0.000839167,0.002562639,0.000152283,0.0001941251,0.004424794,0.0004811996,0.7763848,0.09362052,0.09315875,0.02776946,0.0002112559],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.2846446,0.002485598,0.6699383,0.00334256,0.000281712,0.0004940241,0.0004177354,0.02069006,0.01770541],"genre_scores_gemma":[0.9449036,0.0002333485,0.05023326,0.0005831864,0.00005219605,0.00005886755,0.0001560251,0.0004298179,0.00334979],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.004127444,"threshold_uncertainty_score":0.02182829,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.09591271391953413,"score_gpt":0.3458888259358756,"score_spread":0.2499761120163414,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}