6.1The RAG Attack Surface

Retrieval-Augmented Generation (RAG) systems introduce a unique attack surface at the intersection of search and generation. The retrieval pipeline can be poisoned, citations can be fabricated, and context window limits create truncation vulnerabilities. Each stage of the RAG pipeline has distinct threats.