Research
KidnapRAG: A Black-Box Attack for Hijacking Reasoning in Agentic Retrieval-Augmented Generation Systems
Publication date not yet evaluated · Added · 2 reports arxiv.org
Page published
Coverage timeline
Why it matters
KidnapRAG shows that agentic RAG systems can have their reasoning chains hijacked via a practical black-box attack, expanding the poisoning threat surface defenders must account for in retrieval-grounded AI agents.
KidnapRAG is a black-box attack presented as academic research that hijacks the reasoning process of agentic Retrieval-Augmented Generation (RAG) systems, steering their multi-step reasoning toward attacker-chosen conclusions without white-box access. The work targets the retrieval and reasoning surface that agentic RAG pipelines depend on, with accompanying code published on GitHub.