GraphRAG-LTM: A Layered Threat Modeling Framework for Attacks on Graph Retrieval-Augmented Generation

Summary

GraphRAG-LTM is a Layered Threat Modeling framework that tests three nested levels of attacker access against graph retrieval-augmented generation (GraphRAG). Under black-box access, ranking feedback guides query edits that demote relevant seed chunks, and white-box retriever gradients make that attack stronger. A graph-aware white-box variant also deletes bridge triplets from the query-specific evidence graph, which further impairs supporting-fact retrieval.

Topics

• Retrieval-augmented generation

Related items

• MediumAnthropic 'SneakPeek' Flaw Is a Silent Zero-Click ThreatSimilar attack · Dark Reading
• HighCVE-2026-104103: Ludwig archive extraction allows writes outside extraction directorySimilar attack · NVD/CVE Database
• InfoFrom Training to Escalation: Forensic Analysis and Local Recreation of RL/RLHF-Induced Privilege Escalation in AI Agents (CVE-2026-65616)Similar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• HighCVE-2026-110719: Portkey AI Gateway server-side request forgery via x-portkey-custom-host headerSimilar attack · NVD/CVE Database
• MediumAI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen FindsSimilar attack · SecurityWeek