RAG security: the retrieved document is now your attack surface

Cross-post. Original: stellarbytecapital.com/blog/rag-security Retrieval-augmented generation is the default way to make an LLM useful on your own data: fetch relevant documents, stuff them into the prompt, let the model answer grounded in them. In the process it quietly wires an untrusted data source directly into your model's context. Every...