RAG Pipeline Attacks

RAG bolts a search step onto the model: before answering, the app retrieves chunks from a knowledge base and pastes them into the prompt as reference. That knowledge base is an input channel — anything that can land a document in it can put text into the model's context. Poison the corpus, win the ranking, and your instructions get retrieved and read as trusted source material.