[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-new-attack-targets-the-index-behind-graphrag-pipelines":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},9979,"new-attack-targets-the-index-behind-graphrag-pipelines","New Attack Targets the Index Behind GraphRAG Pipelines","A new attack corrupts the summaries and scores GraphRAG builds during indexing, hijacking up to six queries per tweak while dodging standard defenses.","A new study shows GraphRAG systems can be quietly sabotaged through the index they build to organize answers, not just the data they store.\n\nResearchers describe an attack called Hop-Decayed Influence, or HDI, that targets a part of GraphRAG pipelines nobody was watching: the semantic summaries, hierarchical edges, and pre-computed relevance scores built during offline indexing. Instead of poisoning individual facts in a knowledge graph, HDI finds the few auxiliary structures with outsized influence on retrieval and corrupts those after indexing is done. Tested against Microsoft's GraphRAG and HippoRAG2 on two multi-hop question-answering benchmarks, the attack succeeded 88 to 94 percent of the time while altering as little as 0.016 percent of the auxiliary data. Because each tampered structure feeds multiple queries, a single edit can derail up to six separate answers, a multiplier effect the paper calls a Schema Leverage Ratio of 1:N.\n\nThat ratio is the real story. Earlier RAG attacks worked one node or edge at a time, which made them slow to scale and relatively easy to catch. HDI gets amplification for free by targeting the scaffolding retrieval systems lean on, and because that scaffolding is machine-generated text, it reads as normal system output, evading perplexity and paraphrase-based defenses more than 99 percent of the time.\n\nIf GraphRAG becomes the default way enterprises query their internal knowledge, this is a reminder that the index itself needs the same scrutiny as the documents going into it.","[\"graphrag\",\"rag security\",\"llm vulnerabilities\",\"ai research\"]","2026-10-05T04:00:00.000Z","2026-10-05T16:28:14.311Z","2026-10-05T16:28:18.579Z","published",null,[],"security",[26,27,28,29],"graphrag","rag security","llm vulnerabilities","ai research",[31],{"name":32,"url":33},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2610.02373",0,{"sections":36},[37,41,44,49,54,59,63,68,72,76,81,86,91,96],{"name":38,"slug":39,"count":40,"latest_published_at":18},"AI","ai",6233,{"name":42,"slug":24,"count":43,"latest_published_at":18},"Security",868,{"name":45,"slug":46,"count":47,"latest_published_at":48},"Policy","policy",444,"2026-10-03T15:02:01.000Z",{"name":50,"slug":51,"count":52,"latest_published_at":53},"Deals","deals",323,"2026-10-04T13:00:00.000Z",{"name":55,"slug":56,"count":57,"latest_published_at":58},"Hardware","hardware",204,"2026-10-03T14:50:50.000Z",{"name":60,"slug":61,"count":62,"latest_published_at":18},"Science","science",177,{"name":64,"slug":65,"count":66,"latest_published_at":67},"Consumer Tech","consumer-tech",158,"2026-10-03T03:21:12.000Z",{"name":69,"slug":70,"count":71,"latest_published_at":18},"Dev Tools","dev-tools",97,{"name":73,"slug":74,"count":71,"latest_published_at":75},"Software","software","2026-10-04T10:00:00.000Z",{"name":77,"slug":78,"count":79,"latest_published_at":80},"Startups","startups",92,"2026-10-04T14:36:25.000Z",{"name":82,"slug":83,"count":84,"latest_published_at":85},"Gaming","gaming",53,"2026-10-02T02:50:39.000Z",{"name":87,"slug":88,"count":89,"latest_published_at":90},"General","general",51,"2026-10-05T02:35:01.000Z",{"name":92,"slug":93,"count":94,"latest_published_at":95},"Reviews","reviews",32,"2026-10-02T18:00:00.000Z",{"name":97,"slug":98,"count":99,"latest_published_at":100},"How-To","how-to",7,"2026-10-01T09:00:00.000Z"]