Last analyzed 9/9/2026

Language Model Security Database

Explore primary-source AI security research, evaluated models, attack techniques, and defensive evidence.

985 research findings · 1123 evaluated models

Findings

985

Models evaluated

1123

Paper-evaluated models

Any selected model can match.

Refine by category

Findings match every selected category.

Attack Type2 selected

Attack Context

Architecture Components1 selected

Attack Surface

Impact

Advanced filters

Published fromPublished through

Research indexed from arXiv.

Evidence status

Filtered research findings

1 entry

Matches every word across titles, descriptions, sources, affected systems, and models.

MLM Adaptive RAG Poisoning

Published 3/1/2025

Analyzed 12/30/2025

A vulnerability exists in Retrieval-Augmented Generation (RAG) systems that allows for black-box adversarial attacks known as "CtrlRAG." This flaw allows an attacker to manipulate the generation of Large Language Models (LLMs) by injecting maliciously crafted inputs into the system's knowledge base. Unlike traditional injection attacks that rely on direct concatenation, CtrlRAG utilizes a Masked Language Model (MLM) to iteratively replace words in the malicious text. This optimization ensures…

CtrlRAG: Black-box Document Poisoning Attacks for Retrieval-Augmented Generation of Large Language Models

Evaluated models: GPT-4 Turbo, GPT-4o, Claude 3.5 Sonnet +2 more

Source: arXiv

Research methodology

Entries summarize publicly available primary-source security research. Model names reflect only systems explicitly evaluated by the cited paper, and measurements are research-reported unless independent verification is stated.