One Polluted Page Is Enough: Evaluating Web Content Pollution in Generative Recommenders
A new benchmark called FORGE has been developed to evaluate the vulnerability of search-augmented LLMs to web content pollution. The benchmark simulates scenarios where fake reviews and promotional pages are used to mislead recommendation systems. Across 12 different LLMs, researchers found that even a single polluted page could lead to fake product recommendations up to 27% of the time, with this rate increasing to 73.8% when the top three search results were polluted. The study also noted that reasoning capabilities in LLMs did not prevent this vulnerability and that proposed defenses like skepticism prompting and consensus filtering had mixed results. AI
IMPACT Highlights a critical security flaw in current LLM recommendation systems, potentially impacting e-commerce and user trust.