{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T18:04:48Z","timestamp":1784138688342,"version":"3.55.0"},"publisher-location":"New York, NY, USA","reference-count":40,"publisher":"ACM","license":[{"start":{"date-parts":[[2026,7,19]],"date-time":"2026-07-19T00:00:00Z","timestamp":1784419200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"National Natural Science Foundation of China","award":["U25B2076"],"award-info":[{"award-number":["U25B2076"]}]},{"name":"National Natural Science Foundation of China","award":["62441229"],"award-info":[{"award-number":["62441229"]}]},{"name":"Strategic Priority Research Program of the CAS","award":["XDB0680102"],"award-info":[{"award-number":["XDB0680102"]}]},{"name":"National Key Research and Development Program of China","award":["2023YFA1011602"],"award-info":[{"award-number":["2023YFA1011602"]}]},{"name":"Dutch Research Council (NWO)","award":["024.004.022"],"award-info":[{"award-number":["024.004.022"]}]},{"name":"Dutch Research Council (NWO)","award":["NWA.1389.20.183"],"award-info":[{"award-number":["NWA.1389.20.183"]}]},{"name":"Dutch Research Council (NWO)","award":["KICH3.LTP.20.006"],"award-info":[{"award-number":["KICH3.LTP.20.006"]}]},{"name":"European Union","award":["101201510"],"award-info":[{"award-number":["101201510"]}]},{"name":"National Natural Science Foundation of China","award":["62472408"],"award-info":[{"award-number":["62472408"]}]},{"name":"National Natural Science Foundation of China","award":["62372431"],"award-info":[{"award-number":["62372431"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2026,7,20]]},"DOI":"10.1145\/3805712.3809838","type":"proceedings-article","created":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T17:06:26Z","timestamp":1784135186000},"page":"4145-4150","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["AdversarialCoT: Single-Document Retrieval Poisoning for LLM Reasoning"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-8443-9499","authenticated-orcid":false,"given":"Hongru","family":"Song","sequence":"first","affiliation":[{"name":"State Key Laboratory of AI Safety, Beijing, China, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China, and University of Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9125-5097","authenticated-orcid":false,"given":"Yu-An","family":"Liu","sequence":"additional","affiliation":[{"name":"State Key Laboratory of AI Safety, Beijing, China, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China, and University of Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4294-2541","authenticated-orcid":false,"given":"Ruqing","family":"Zhang","sequence":"additional","affiliation":[{"name":"State Key Laboratory of AI Safety, Beijing, China, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China, and University of Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9509-8674","authenticated-orcid":false,"given":"Jiafeng","family":"Guo","sequence":"additional","affiliation":[{"name":"State Key Laboratory of AI Safety, Beijing, China, Institute of Computing Technolgy, Chinese Academy of Sciences, Beijing, China, and University of Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1086-0202","authenticated-orcid":false,"given":"Maarten","family":"de Rijke","sequence":"additional","affiliation":[{"name":"University of Amsterdam, Amsterdam, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4317-2702","authenticated-orcid":false,"given":"Yixing","family":"Fan","sequence":"additional","affiliation":[{"name":"State Key Laboratory of AI Safety, Beijing, China, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China, and University of Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5201-8195","authenticated-orcid":false,"given":"Xueqi","family":"Cheng","sequence":"additional","affiliation":[{"name":"State Key Laboratory of AI Safety, Beijing, China, Institute of Computing Technology, Chinese Academy of Sciences, Beijing, China, and University of Chinese Academy of Sciences, Beijing, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2026,7,19]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.2503.10814"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","unstructured":"Maciej Besta Nils Blach Ales Kubicek Robert Gerstenberger Lukas Gianinazzi Joanna Gajda Tomasz Lehmann Michal Podstawski Hubert Niewiadomski Piotr Nyczyk and Torsten Hoefler. 2023. Graph of Thoughts: Solving Elaborate Problems with Large Language Models. arXiv:2308.09687 [cs] doi:10.48550\/arXiv.2308.09687","DOI":"10.48550\/arXiv.2308.09687"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","unstructured":"Zhuo Chen Yuyang Gong Miaokun Chen Haotan Liu Qikai Cheng Fan Zhang Wei Lu Xiaozhong Liu and Jiawei Liu. 2025. FlipedRAG: Black-Box Opinion Manipulation Attacks to Retrieval-Augmented Generation of Large Language Models. arXiv:2501.02968 [cs] doi:10.48550\/arXiv.2501.02968","DOI":"10.48550\/arXiv.2501.02968"},{"key":"e_1_3_2_1_4_1","volume-title":"SmartRAG: Jointly Learn RAG-Related Tasks From the Environment Feedback. arXiv preprint arXiv:2410.18141","author":"Gao Jingsheng","year":"2024","unstructured":"Jingsheng Gao, Linxu Li, Weiyuan Li, Yuzhuo Fu, and Bin Dai. 2024. SmartRAG: Jointly Learn RAG-Related Tasks From the Environment Feedback. arXiv preprint arXiv:2410.18141 (2024)."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2022.acl-long.203"},{"key":"e_1_3_2_1_6_1","unstructured":"GLM-4.5 Team Aohan Zeng Xin Lv Qinkai Zheng Zhenyu Hou Bin Chen Chengxing Xie et al. 2025. GLM-4.5: Agentic Reasoning and Coding (ARC) Foundation Models. arXiv:2508.06471 [cs.CL] https:\/\/arxiv.org\/abs\/2508.06471"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","unstructured":"Daya Guo Dejian Yang Haowei Zhang Junxiao Song Ruoyu Zhang Runxin Xu Qihao Zhu Shirong Ma Peiyi Wang Xiao Bi et al. 2025. DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning. arXiv:2501.12948 [cs.CL] https:\/\/doi.org\/10.48550\/arXiv.2501.12948","DOI":"10.48550\/arXiv.2501.12948"},{"key":"e_1_3_2_1_8_1","volume-title":"Retrieval Augmented Language Model Pre-training. In International Conference on Machine Learning. PMLR, 3929-3938","author":"Guu Kelvin","year":"2020","unstructured":"Kelvin Guu, Kenton Lee, Zora Tung, Panupong Pasupat, and Mingwei Chang. 2020. Retrieval Augmented Language Model Pre-training. In International Conference on Machine Learning. PMLR, 3929-3938."},{"key":"e_1_3_2_1_9_1","first-page":"1119","article-title":"Prompt Perturbation in Retrieval-Augmented Generation based Large Language Models","author":"Hu Zhibo","year":"2024","unstructured":"Zhibo Hu, Chen Wang, Yanfeng Shu, Hye-Young Paik, and Liming Zhu. 2024. Prompt Perturbation in Retrieval-Augmented Generation based Large Language Models. In SIGKDD. 1119-1130.","journal-title":"SIGKDD."},{"key":"e_1_3_2_1_10_1","first-page":"874","article-title":"Leveraging Passage Retrieval with Generative Models for Open Domain Question Answering","author":"Izacard Gautier","year":"2021","unstructured":"Gautier Izacard and \u00c9douard Grave. 2021. Leveraging Passage Retrieval with Generative Models for Open Domain Question Answering. In EACL. 874-880.","journal-title":"EACL."},{"key":"e_1_3_2_1_11_1","volume-title":"Atlas: Few-shot Learning with Retrieval Augmented Language Models. arXiv:2208.03299 [cs.CL] https:\/\/arxiv.org\/abs\/2208.03299","author":"Izacard Gautier","year":"2022","unstructured":"Gautier Izacard, Patrick Lewis, Maria Lomeli, Lucas Hosseini, Fabio Petroni, Timo Schick, Jane Dwivedi-Yu, Armand Joulin, Sebastian Riedel, and Edouard Grave. 2022. Atlas: Few-shot Learning with Retrieval Augmented Language Models. arXiv:2208.03299 [cs.CL] https:\/\/arxiv.org\/abs\/2208.03299"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","unstructured":"Bowen Jin Hansi Zeng Zhenrui Yue Jinsung Yoon Sercan Arik Dong Wang Hamed Zamani and Jiawei Han. 2025. Search-R1: Training LLMs to Reason and Leverage Search Engines with Reinforcement Learning. arXiv:2503.09516 [cs] doi:10.48550\/arXiv.2503.09516","DOI":"10.48550\/arXiv.2503.09516"},{"key":"e_1_3_2_1_13_1","volume-title":"Natural Questions: a Benchmark for Question Answering Research. Transactions of the Association of Computational Linguistics","author":"Kwiatkowski Tom","year":"2019","unstructured":"Tom Kwiatkowski, Jennimaria Palomaki, Olivia Redfield, Michael Collins, Ankur Parikh, Chris Alberti, Danielle Epstein, Illia Polosukhin, Matthew Kelcey, Jacob Devlin, Kenton Lee, Kristina N. Toutanova, Llion Jones, Ming-Wei Chang, Andrew Dai, Jakob Uszkoreit, Quoc Le, and Slav Petrov. 2019. Natural Questions: a Benchmark for Question Answering Research. Transactions of the Association of Computational Linguistics (2019)."},{"key":"e_1_3_2_1_14_1","first-page":"9459","article-title":". Retrieval-Augmented Generation for Knowledge-Intensive NLP Tasks","volume":"33","author":"Lewis Patrick","year":"2020","unstructured":"Patrick Lewis, Ethan Perez, Aleksandra Piktus, Fabio Petroni, Vladimir Karpukhin, Naman Goyal, Heinrich K\u00fcttler, Mike Lewis, Wen-tau Yih, Tim Rockt\u00e4schel, et al., 2020. Retrieval-Augmented Generation for Knowledge-Intensive NLP Tasks. Advances in Neural Information Processing Systems, Vol. 33 (2020), 9459-9474.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","unstructured":"Xiaoxi Li Guanting Dong Jiajie Jin Yuyao Zhang Yujia Zhou Yutao Zhu Peitian Zhang and Zhicheng Dou. 2025. Search-O1: Agentic Search-Enhanced Large Reasoning Models. arXiv:2501.05366 [cs] doi:10.48550\/arXiv.2501.05366","DOI":"10.48550\/arXiv.2501.05366"},{"key":"e_1_3_2_1_16_1","first-page":"2025","article-title":"Order-disorder: Imitation adversarial attacks for black-box neural ranking models","author":"Liu Jiawei","year":"2022","unstructured":"Jiawei Liu, Yangyang Kang, Di Tang, Kaisong Song, Changlong Sun, Xiaofeng Wang, Wei Lu, and Xiaozhong Liu. 2022. Order-disorder: Imitation adversarial attacks for black-box neural ranking models. In SIGSAC. 2025-2039.","journal-title":"SIGSAC."},{"key":"e_1_3_2_1_17_1","volume-title":"Formalizing and Benchmarking Prompt Injection Attacks and Defenses. In 33rd USENIX Security Symposium (USENIX Security 24)","author":"Liu Yupei","year":"2024","unstructured":"Yupei Liu, Yuqi Jia, Runpeng Geng, Jinyuan Jia, and Neil Zhenqiang Gong. 2024a. Formalizing and Benchmarking Prompt Injection Attacks and Defenses. In 33rd USENIX Security Symposium (USENIX Security 24). 1831-1847."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"crossref","unstructured":"Yu-An Liu Ruqing Zhang Jiafeng Guo and Xueqi Cheng. 2025. On the Robustness of Generative Information Retrieval Models. In ECIR.","DOI":"10.1007\/978-3-031-88711-6_26"},{"key":"e_1_3_2_1_19_1","first-page":"3009","article-title":"Robust Information Retrieval","author":"Liu Yu-An","year":"2024","unstructured":"Yu-An Liu, Ruqing Zhang, Jiafeng Guo, and Maarten de Rijke. 2024b. Robust Information Retrieval. In SIGIR. 3009-3012.","journal-title":"SIGIR."},{"key":"e_1_3_2_1_20_1","first-page":"1391","article-title":"Multi-Granular Adversarial Attacks against Black-box Neural Ranking Models","author":"Liu Yu-An","year":"2024","unstructured":"Yu-An Liu, Ruqing Zhang, Jiafeng Guo, Maarten de Rijke, Yixing Fan, and Xueqi Cheng. 2024c. Multi-Granular Adversarial Attacks against Black-box Neural Ranking Models. In SIGIR. 1391-1400.","journal-title":"SIGIR."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v38i8.28730"},{"key":"e_1_3_2_1_22_1","volume-title":"MS MARCO: A Human-Generated MAchine Reading COmprehension Dataset. arXiv:1611.09268 [cs.CL] https:\/\/arxiv.org\/abs\/1611.09268","author":"Nguyen Tri","year":"2016","unstructured":"Tri Nguyen, Mir Rosenberg, Xia Song, Jianfeng Gao, Saurabh Tiwary, Rangan Majumder, and Li Deng. 2016. MS MARCO: A Human-Generated MAchine Reading COmprehension Dataset. arXiv:1611.09268 [cs.CL] https:\/\/arxiv.org\/abs\/1611.09268"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1162\/tacl_a_00605"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","unstructured":"Zhihong Shao Peiyi Wang Qihao Zhu Runxin Xu Junxiao Song Xiao Bi Haowei Zhang Mingchuan Zhang Y. K. Li Y. Wu and Daya Guo. 2024. DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Models. arXiv:2402.03300 [cs] doi:10.48550\/arXiv.2402.03300","DOI":"10.48550\/arXiv.2402.03300"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.findings-acl.717"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/2025.findings-acl.717"},{"key":"e_1_3_2_1_27_1","volume-title":"Barto","author":"Sutton Richard S.","year":"2018","unstructured":"Richard S. Sutton and Andrew G. Barto. 2018. Reinforcement Learning: An Introduction (2 ed.). The MIT Press, Cambridge, MA."},{"key":"e_1_3_2_1_28_1","unstructured":"Kimi Team Yifan Bai Yiping Bao Guanduo Chen Jiahao Chen Ningxin Chen Ruijue Chen et al. 2025. Kimi K2: Open Agentic Intelligence. arXiv:2507.20534 [cs.LG] https:\/\/arxiv.org\/abs\/2507.20534"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.52202\/075280-3508"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.5555\/3600270.3602070"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/3576923"},{"key":"e_1_3_2_1_32_1","volume-title":"Ground Every Sentence: Improving Retrieval-Augmented LLMs with Interleaved Reference-Claim Generation. arXiv preprint arXiv:2407.01796","author":"Xia Sirui","year":"2024","unstructured":"Sirui Xia, Xintao Wang, Jiaqing Liang, Yifei Zhang, Weikang Zhou, Jiaji Deng, Fei Yu, and Yanghua Xiao. 2024. Ground Every Sentence: Improving Retrieval-Augmented LLMs with Interleaved Reference-Claim Generation. arXiv preprint arXiv:2407.01796 (2024)."},{"key":"e_1_3_2_1_33_1","unstructured":"An Yang Anfeng Li Baosong Yang Beichen Zhang Binyuan Hui Bo Zheng Bowen Yu Chang Gao Chengen Huang et al. 2025. Qwen3 Technical Report. arXiv:2505.09388 [cs.CL] https:\/\/arxiv.org\/abs\/2505.09388"},{"key":"e_1_3_2_1_34_1","unstructured":"An Yang Baosong Yang Beichen Zhang Binyuan Hui Bo Zheng Bowen Yu Chengyuan Li Dayiheng Liu Fei Huang Haoran Wei et al. 2024. Qwen2.5 Technical Report. arXiv preprint arXiv:2412.15115 (2024)."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/D18-1259"},{"key":"e_1_3_2_1_36_1","unstructured":"Shunyu Yao Dian Yu Jeffrey Zhao Izhak Shafran Thomas L. Griffiths Yuan Cao and Karthik Narasimhan. 2023. Tree of Thoughts: Deliberate Problem Solving with Large Language Models. arXiv:2305.10601 [cs.CL] https:\/\/arxiv.org\/abs\/2305.10601"},{"key":"e_1_3_2_1_37_1","first-page":"3537","article-title":"A Multi-task Embedder for Retrieval Augmented LLMs","author":"Zhang Peitian","year":"2024","unstructured":"Peitian Zhang, Zheng Liu, Shitao Xiao, Zhicheng Dou, and Jian-Yun Nie. 2024b. A Multi-task Embedder for Retrieval Augmented LLMs. In ACL. 3537-3553.","journal-title":"ACL."},{"key":"e_1_3_2_1_38_1","volume-title":"HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models. arXiv preprint arXiv:2410.22832","author":"Zhang Yucheng","year":"2024","unstructured":"Yucheng Zhang, Qinfeng Li, Tianyu Du, Xuhong Zhang, Xinkui Zhao, Zhengwen Feng, and Jianwei Yin. 2024a. HijackRAG: Hijacking Attacks against Retrieval-Augmented Large Language Models. arXiv preprint arXiv:2410.22832 (2024)."},{"key":"e_1_3_2_1_39_1","unstructured":"Chujie Zheng Shixuan Liu Mingze Li Xiong-Hui Chen Bowen Yu Chang Gao Kai Dang Yuqiong Liu Rui Men An Yang Jingren Zhou and Junyang Lin. 2025. Group Sequence Policy Optimization. arXiv:2507.18071 [cs.LG] https:\/\/arxiv.org\/abs\/2507.18071"},{"key":"e_1_3_2_1_40_1","unstructured":"Wei Zou Runpeng Geng Binghui Wang and Jinyuan Jia. 2024. PoisonedRAG: Knowledge Corruption Attacks to Retrieval-Augmented Generation of Large Language Models. arXiv:2402.07867 [cs.CR] https:\/\/arxiv.org\/abs\/2402.07867"}],"event":{"name":"SIGIR '26: The 49th International ACM SIGIR Conference on Research and Development in Information Retrieval","location":"Melbourne VIC Australia","sponsor":["SIGIR ACM Special Interest Group on Information Retrieval"]},"container-title":["Proceedings of the 49th International ACM SIGIR Conference on Research and Development in Information Retrieval"],"original-title":[],"deposited":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T17:06:49Z","timestamp":1784135209000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3805712.3809838"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7,19]]},"references-count":40,"alternative-id":["10.1145\/3805712.3809838","10.1145\/3805712"],"URL":"https:\/\/doi.org\/10.1145\/3805712.3809838","relation":{},"subject":[],"published":{"date-parts":[[2026,7,19]]},"assertion":[{"value":"2026-07-19","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}