KidnapRAG

KidnapRAG: A Black-Box Attack for Hijacking Reasoning in Agentic Retrieval-Augmented Generation Systems 🎓 Paper | 📄 Datasets | 🚀 Quick Start Quick Start Run the following commands from the parent directory of the cloned KidnapRAG repository. cd KidnapRAG conda create -n KidnapRAG python=3.10 cond...

Salience Induction against Multi-Hop RAG Agents: Threat and Defense

Agentic retrieval-augmented generation RAG systems increasingly retrieve external evidence and orchestrate tools for knowledge-intensive applications. In Multi-Hop question answering, agents chain facts across documents. Existing defenses focus on content poisoning, which injects false facts, and...

agent-builder (>=0.0.2, <=0.1.7), agent-nexus-cli (>=0.1.0, <=0.1.31) +159 more potentially affected by CVE-2026-41488 via langchain-openai (>=1.0.0a4, <=1.1.12)

langchain-openai PYPI version =1.0.0a4, =0.0.2, =0.1.0, =0.9.1, =0.1.2, =1.1.0a20250502, =1.1.0a20250502, =1.1.0rc1, =1.1.0rc1, =1.1.0a20250502, =1.1.0a20250502, =1.1.0a20250502, =0.1.0, =0.1.2, =0.3.2, =1.4.0a20260123, =1.5.0a20260130 and more Source cves: CVE-2026-41488 Source advisory:...

ARCeR: an Agentic RAG for the Automated Definition of Cyber Ranges

The growing and evolving landscape of cybersecurity threats necessitates the development of supporting tools and platforms that allow for the creation of realistic IT environments operating within virtual, controlled settings as Cyber Ranges CRs. CRs can be exploited for analyzing vulnerabilities...