Shan Xie

FramePoison: attacks on medical RAG that target framing, not just facts

Retrieval-augmented generation (RAG) is increasingly used in high-stakes domains like medicine, where answers are grounded in retrieved literature and can shape clinical understanding. This opens a new attack surface: an adversary can shape model outputs by injecting a few docume...