MITRE ATLAS 2026 Top AI Detection: RAG Knowledge Base Poisoning via Malicious Document Injection (AML.T0070)

Ibrahim Saud@tektrix

•updated Sep 25, 2026•0•0•0

Detects adversarial attempts to poison Retrieval-Augmented Generation (RAG) knowledge bases. This includes the ingestion of documents containing prompt injection directives (e.g., 'ignore previous instructions'), hidden malicious markup intended to manipulate LLM inference, unauthenticated data ingestion, or abnormal volume spikes from a single source.