{"data":{"id":"6a1c4d03-294b-473e-8c3b-be3f081209f7","title":"SNAPRAG: Cost-Efficient Knowledge Extraction Attack on RAG Systems via Adversarial Perturbations","summary":"SNAPRAG is a black-box attack that extracts private knowledge bases from RAG systems using discrete token-mutation adversarial queries, without relying on external LLMs. The authors report that extracting half of the target knowledge base needs up to 6.77 times fewer queries than existing approaches, and within a fixed query budget it recovers up to 96.9% of the data. Against active defenses, it remained the leading attack on four of five targets, reaching a 50.7-96.3% extraction rate.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2611.12241v1","publishedAt":"2026-11-09T11:30:44.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["data_extraction"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-09T11:30:44.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality"],"aiComponentTargeted":"rag","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":null}}