· aka: RAG Poisoning
Attacker injects malicious content into the agent's knowledge base (vector store, document repository) to influence future responses.
All queries retrieving poisoned documents are compromised.
Agent with RAG pipeline using externally-sourced documents.