Wang, H. et al. 2026. Joint-GCG: Unified Gradient-Based Poisoning Attacks on Retrieval-Augmented Generation Systems. Proceedings of the AAAI Conference on Artificial Intelligence. 40, 42 (Mar. 2026), 35793–35801. DOI:https://doi.org/10.1609/aaai.v40i42.40893.