H. Wang, “Joint-GCG: Unified Gradient-Based Poisoning Attacks on Retrieval-Augmented Generation Systems”, AAAI, vol. 40, no. 42, pp. 35793–35801, Mar. 2026.