A Security Meta-Model for Retrieval-Augmented Generation Systems

Summary

The paper introduces a security meta-model for Retrieval-Augmented Generation (RAG) systems that links RAG surfaces, attacks, weaknesses, risks, and CIA impact. Built from an iterative analysis of 43 publications from 2023 to 2026, it is instantiated as a catalog that filters into a deployment-specific risk profile. The authors report an imbalance between attack-focused and defense-focused research, a concentration of threats at ingestion, and coverage gaps affecting output integrity.

Topics

• Retrieval-augmented generation

Related items

• LowSocial Engineering AI Agents: The New BEC for 2026Similar attack · Dark Reading
• MediumGHSA-hmq2-7hp6-7crh: Banks: User-controlled prompt input can be parsed as privileged chat messagesSimilar attack · GitHub Advisory Database
• CriticalGHSA-9mp3-24cc-77mg: PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool CallsSimilar attack · GitHub Advisory Database
• Medium'AgentCorruption' Puts AWS Environments At Risk With Single PromptSimilar attack · Dark Reading
• MediumGHSA-4xxv-6wmf-xf45: PraisonAI: FastContext path resolution permits absolute and traversal reads outside the workspaceSimilar attack · GitHub Advisory Database