RAG Poisoning: How Attackers Corrupt AI Knowledge Bases Through Document Injection

RAG poisoning attack walkthrough: an attacker injects fabricated documents into a ChromaDB knowledge base and the LLM reports false financials as fact. Fully reproducible, 100% local, no GPU required.