Wang, H.; Zhang, R.; Wang, J.; Li, M.; Huang, Y.; Wang, D.; Wang, Q. Joint-GCG: Unified Gradient-Based Poisoning Attacks on Retrieval-Augmented Generation Systems. AAAI 2026, 40, 35793-35801.