PulseAugur
EN
LIVE 18:27:37

FedRAG systems vulnerable to 'Routing Hijacking' attacks

Researchers have identified a significant security vulnerability in Federated Retrieval-Augmented Generation (FedRAG) systems, termed "Routing Hijacking." This attack allows malicious clients to manipulate their semantic profiles to attract and misroute target queries, even when their underlying data is irrelevant. The consequences include missing evidence, data poisoning, and incorrect or hallucinated answers, as demonstrated in a case study on medical question answering. Existing defenses are insufficient, prompting the proposal of a new trust-aware framework that reweights clients based on evidence feedback to enhance routing integrity. AI

IMPACT Highlights a new security challenge in federated AI systems, necessitating stronger defenses for routing integrity.

RANK_REASON Academic paper detailing a new security vulnerability in a specific AI system. [lever_c_demoted from research: ic=1 ai=1.0]

Read on Hugging Face Daily Papers →

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

FedRAG systems vulnerable to 'Routing Hijacking' attacks

COVERAGE [1]

  1. Hugging Face Daily Papers TIER_1 English(EN) ·

    A Wolf in Sheep's Clothing: Targeted Routing Hijacking in Federated RAG

    Federated Retrieval-Augmented Generation (FedRAG) is attractive for privacy-sensitive applications because raw data remain local. As a result, routing must rely on client-provided semantic profiles, creating a new opportunity for manipulation. We introduce Routing Hijacking, a ro…