AttacksarXiv 2604.12201
AdversarialCoT: single-document retrieval poisoning for LLM reasoning
Proposes AdversarialCoT single-document retrieval poisoning to manipulate RAG reasoning answers
- arXiv
- 2604.12201
- Published
- Layer
- Application layer
- Setting
- LLM applications
- Evaluated models
- DeepSeek-R1, Qwen3, GLM4.5 and others5
- AttacksPoisoning and backdoors
- TechniqueReasoning-chain manipulation
- ComponentRAG